CVE-2025-55371 – jshERP Insecure Direct Object Reference (IDOR)

CVE ID : CVE-2025-55371

Published : Aug. 21, 2025, 3:15 p.m. | 57 minutes ago

Description : Incorrect access control in the component /controller/PersonController.java of jshERP v3.5 allows unauthorized attackers to obtain all the information of the handler by executing the getAllList method.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…