The vulnerability in dromara lamp-cloud (<=5.10.0) involves improper validation of the employeeId parameter in the /anyone/visible/resource endpoint. Authenticated users can exploit this by providing arbitrary employeeId values to enumerate other employees' role codes, permission codes, and front-end router trees without proper authorization. This constitutes an authorization bypass (CWE-639). The CVSS 3.1 score is 4.3 (medium severity) with network attack vector, low attack complexity, and requiring low privileges but no user interaction.

An attacker with valid authentication can read sensitive authorization information of other employees, including roles and permissions, potentially leading to information disclosure. However, the vulnerability does not allow modification or denial of service. The impact is limited to confidentiality of authorization data.

No official patch or fix is currently documented. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the /anyone/visible/resource endpoint to trusted users only or implement additional access controls to validate employeeId parameters server-side.