EUVD-2025-199642

An issue was discovered in jishenghua JSHERP 2.3.1. The /material/getMaterialEnableSerialNumberList endpoint passes the search query parameter directly to parseObject, introducing a Fastjson deserialization vulnerability that can lead to RCE via JDBC payloads...

PT-2025-48081

Name of the Vulnerable Software and Affected Versions jishenghua JSH ERP version 2.3.1 Description An issue exists in the software where the /material/getMaterialEnableSerialNumberList API endpoint directly passes the search query parameter to the parseObject function. This introduces a Fastjson...