Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pq77-49vf-gcj4

Опубликовано: 25 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An issue was discovered in jishenghua JSH_ERP 2.3.1. The /user/addUser endpoint is vulnerable to fastjson deserialization attacks.

An issue was discovered in jishenghua JSH_ERP 2.3.1. The /user/addUser endpoint is vulnerable to fastjson deserialization attacks.

EPSS

Процентиль: 20%
0.00062
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 9.8
nvd
2 месяца назад

An issue was discovered in jishenghua JSH_ERP 2.3.1. The /user/addUser endpoint is vulnerable to fastjson deserialization attacks.

EPSS

Процентиль: 20%
0.00062
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-502