CVE-2025-60800

The jshERP (Huaxia ERP) system is vulnerable to incorrect access control in the /jshERP-boot/user/info API endpoint. This flaw allows an attacker to perform a crafted GET request to access sensitive information. The vulnerability affects versions up to and including commit 90c411a . To remediate ...