CNNVD-202508-2614 Information

CNNVD ID

CNNVD-202508-2614

CVE-2025-55371

  • CNNVD Published: 2025-08-21

Description (Chinese)

jshERP(华夏ERP)是中国季圣华个人开发者的一款国产 ERP 系统。 jshERP v3.5版本存在安全漏洞,该漏洞源于PersonController.java组件中的访问控制不当,可能导致获取处理者信息。

Description (English)

Jsherp (Wahsha ERP) is a nationally produced ERP system for Chinese personal developers in Zhi Sanhua. The security loophole in jsherp v3.5 arises from inadequate access controls in the PersonController.java component, which may lead to access to processor information.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-08-21

Last Modified

2026-02-24

References

https://github.com/jishenghua/jshERP https://github.com/cina666/CVE/blob/main/jshERP/%E8%B6%8A%E6%9D%83%E8%87%B4%E4%BB%BB%E6%84%8F%E6%8E%A5%E7%AE%A1%E8%B4%A6%E5%8F%B7.md http://jsherp.com https://nvd.nist.gov/vuln/detail/CVE-2025-55371

Share on: