high7.5
CVE-2025-60800
Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted …
Impact
Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jishenghua | Jsherp | before 2025-08-07 |