CVE-2025-55368

8.8 highEPSS 0.4%

High (8.8) in jishenghua jsherp. EPSS 0.4% chance of exploitation in the next 30 days.

Incorrect access control in the component \controller\RoleController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2025-08-21
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

jishenghua:jsherp

References

https://github.com/cina666/CVE/blob/main/jshERP/CVE-2025-55368.md
https://github.com/jishenghua/jshERP

Check your stack JSON