Home

Description

Incorrect access control in the component \controller\ResourceController.java of jshERP v3.5 allows unauthorized attackers to obtain all the corresponding ID data by modifying the ID value.

PUBLISHED Reserved 2025-08-13 | Published 2025-08-21 | Updated 2025-08-21 | Assigner mitre

References

jsherp.com

github.com/jishenghua/jshERP

github.com/...获取任意账号信息实现任意登录.md

cve.org (CVE-2025-55370)

nvd.nist.gov (CVE-2025-55370)

Download JSON