CVE-2025-51743

Description

An issue was discovered in jishenghua JSH_ERP 2.3.1. The /materialCategory/addMaterialCategory endpoint is vulnerable to fastjson deserialization attacks.

PUBLISHED Reserved 2025-06-16 | Published 2025-11-25 | Updated 2025-11-26 | Assigner mitre

References

gitee.com/jishenghua/JSH_ERP

gitee.com/jishenghua

blog.hackpax.top/jsh-erp2/

gist.github.com/Paxsizy/cd1557aeba8093a8650601c4dbffb6f9

cve.org (CVE-2025-51743)

nvd.nist.gov (CVE-2025-51743)

Download JSON