PT-2025-48081

Name of the Vulnerable Software and Affected Versions jishenghua JSH ERP version 2.3.1 Description An issue exists in the software where the /material/getMaterialEnableSerialNumberList API endpoint directly passes the search query parameter to the parseObject function. This introduces a Fastjson...