CVE-2025-60800

The jshERP (Huaxia ERP) system is vulnerable to incorrect access control in the /jshERP-boot/user/info API endpoint. This flaw allows an attacker to perform a crafted GET request to access sensitive information. The vulnerability affects versions up to and including commit 90c411a . To remediate ...

jshERP 安全漏洞

jshERP Huaxia ERP is a homegrown ERP system by the individual developer of Ji Sheng Hua in China. A security vulnerability exists in jshERP 90c411a and earlier versions, which originates from improper access control of the /jshERP-boot/user/info interface, and may result in the disclosure of...