4 matches found
CVE-2025-51744
An issue was discovered in jishenghua JSHERP 2.3.1. The /user/addUser endpoint is vulnerable to fastjson deserialization attacks...
CVE-2025-51744
An issue was discovered in jishenghua JSHERP 2.3.1. The /user/addUser endpoint is vulnerable to fastjson deserialization attacks...
PT-2025-48083
An issue was discovered in jishenghua JSH ERP 2.3.1. The /user/addUser endpoint is vulnerable to fastjson deserialization attacks...
CVE-2025-51744
The jishenghua JSH_ERP 2.3.1 software is vulnerable to fastjson deserialization attacks via the /user/addUser endpoint. This vulnerability allows for the deserialization of untrusted data (CWE-502), which can lead to critical security impacts. While the provided documents confirm the existence of...