CVE-2025-60800

The jshERP (Huaxia ERP) system is vulnerable to an improper access control flaw in the /jshERP-boot/user/info interface in versions up to commit 90c411a . Attackers can exploit this by sending a crafted GET request to obtain sensitive information from the API endpoint. To remediate this vulnerabi...