Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cw37-799x-r3xf

Опубликовано: 07 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

jshERP v3.3 is vulnerable to SQL Injection. via the com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findallocationDetail() function of jshERP which allows an attacker to construct malicious payload to bypass jshERP's protection mechanism.

jshERP v3.3 is vulnerable to SQL Injection. via the com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findallocationDetail() function of jshERP which allows an attacker to construct malicious payload to bypass jshERP's protection mechanism.

EPSS

Процентиль: 18%
0.00059
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 лет назад

jshERP v3.3 is vulnerable to SQL Injection. via the com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findallocationDetail() function of jshERP which allows an attacker to construct malicious payload to bypass jshERP's protection mechanism.

EPSS

Процентиль: 18%
0.00059
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89