Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/11/26 12:42 a.m.12 views

CVE-2025-51745

An issue was discovered in jishenghua JSHERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks...

9.8CVSS7.1AI score0.00146EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/25 9:32 p.m.4 views

EUVD-2025-199649

An issue was discovered in jishenghua JSHERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks...

6.5AI score0.00146EPSS
Exploits0References5
NVD
NVD
added 2025/11/25 9:15 p.m.4 views

CVE-2025-51745

An issue was discovered in jishenghua JSHERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks...

9.8CVSS0.00146EPSS
Exploits0References4
OSV
OSV
added 2025/11/25 9:15 p.m.3 views

CVE-2025-51745

An issue was discovered in jishenghua JSHERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks...

9.8CVSS7AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/11/25 12:0 a.m.4 views

PT-2025-48084

An issue was discovered in jishenghua JSH ERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks...

7.1AI score0.00146EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/11/25 12:0 a.m.2 views

jshERP 安全漏洞

jshERP Huaxia ERP is a homegrown ERP system by the individual developer of China's Ji Sheng Hua. A security vulnerability exists in jshERP version 2.3.1, which originates from the role/addcan endpoint being vulnerable to Fastjson deserialization attack...

9.8CVSS6.8AI score0.00146EPSS
Exploits0References5
CVE
CVE
added 2025/11/25 12:0 a.m.14 views

CVE-2025-51745

CVE-2025-51745 affects jishenghua JSH_ERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks due to the deserialization flaw in that endpoint. The CVSS metrics indicate a high-severity, network-exposed chain with no user interaction and total impact on confidential...

9.8CVSS6.7AI score0.00146EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/25 12:0 a.m.4 views

CVE-2025-51745

An issue was discovered in jishenghua JSHERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks...

6.7AI score0.00146EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/11/25 12:0 a.m.6 views

CVE-2025-51745

An issue was discovered in jishenghua JSHERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks...

0.00146EPSS
Exploits0References4
Rows per page
Query Builder