CVE-2025-55366

The jshERP v3.5 ERP system is vulnerable to an incorrect access control flaw in the controller ol UserController.java component. This vulnerability allows an attacker to arbitrarily reset user account passwords and perform a horizontal privilege escalation attack. Remediation involves addressing ...