216.73.216.86

CVE-2025-60800

· Published 28/10/2025 18:15 · Modified 28/10/2025 18:15

Labels: CVE-2025-60800 2025-10-28CVE-2025-60800[email protected]

Essential information

Published
28/10/2025 18:15
Modified
28/10/2025 18:15
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
jsherp / jsherp cpe:2.3:a:jsherp:jsherp:*:*:*:*:*:*:*:*

References