CVE-2025-55370

8.8 highEPSS 0.4%

High (8.8) in jishenghua jsherp. EPSS 0.4% chance of exploitation in the next 30 days.

Incorrect access control in the component \controller\ResourceController.java of jshERP v3.5 allows unauthorized attackers to obtain all the corresponding ID data by modifying the ID value.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-639
Published: 2025-08-21
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

jishenghua:jsherp

References

https://github.com/cina666/CVE/blob/main/jshERP/%E8%B6%8A%E6%9D%83%E8%8E%B7%E5%8F%96%E4%BB%BB%E6%84%8F%E8%B4%A6%E5%8F%B7%E4%BF%A1%E6%81%AF%E5%AE%9E%E7%8E%B0%E4%BB%BB%E6%84%8F%E7%99%BB%E5%BD%95.md
https://github.com/jishenghua/jshERP

Check your stack JSON