CVE-2025-51745

An issue was discovered in jishenghua JSHERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks...

EUVD-2025-199649

An issue was discovered in jishenghua JSHERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks...

CVE-2025-51745

An issue was discovered in jishenghua JSHERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks...

CVE-2025-51745

An issue was discovered in jishenghua JSHERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks...

jshERP security vulnerabilities

jshERP Huaxia ERP is a homegrown ERP system by the individual developer of China's Ji Sheng Hua. A security vulnerability exists in jshERP version 2.3.1, which originates from the role/addcan endpoint being vulnerable to Fastjson deserialization attack...

CVE-2025-51745

An issue was discovered in jishenghua JSHERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks...

CVE-2025-51745

An issue was discovered in jishenghua JSHERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks...

CVE-2025-51745: Deserialization of Untrusted Data

An issue was discovered in jishenghua JSHERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks...

CVE-2025-51745

The jishenghua JSH_ERP version 2.3.1 contains a critical vulnerability where the /role/addcan API endpoint is susceptible to fastjson deserialization attacks. Specifically, the request parameter within this endpoint is vulnerable to malicious data submission, potentially allowing for a compromise...

PT-2025-48084

Name of the Vulnerable Software and Affected Versions jishenghua JSH ERP version 2.3.1 Description An issue exists in the software where the /role/addcan API endpoint is susceptible to fastjson deserialization attacks. The vulnerability allows for potential compromise through malicious data...