CVE-2025-55370: Authorization Bypass Through User-Controlled Key

Incorrect access control in the component \controller\ResourceController.java of jshERP v3.5 allows unauthorized attackers to obtain all the corresponding ID data by modifying the ID value...