Jsherp · Jsherp · CVE-2025-55370
Name of the Vulnerable Software and Affected Versions:
jshERP version 3.5
Description:
An incorrect access control issue exists in the `controllerResourceController.java` component of jshERP version 3.5. This allows unauthorized attackers to obtain all corresponding ID data by modifying the ID value.
Recommendations:
As a temporary workaround, consider restricting access to the `controllerResourceController.java` component until a patch is available.