CVE-2025-55368

Description

Incorrect access control in the component \controller\RoleController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account.

References

https://github.com/jishenghua/jshERP

https://github.com/cina666/CVE/blob/main/jshERP/CVE-2025-55368.md

http://jsherp.com

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS