CVE-2025-55370: High severity jshERP jshERP vulnerability
Published Aug 21, 2025
·Updated
Incorrect access control in the component \controller\ResourceController.java of jshERP v3.5 allows unauthorized attackers to obtain all the corresponding ID data by modifying the ID value.
Affected Software
2 affected components
jshERP jshERP
jishenghua jshERP=3.5
Event History
Aug 21, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-55370?
CVE-2025-55370 is considered a high-severity vulnerability due to its potential for unauthorized data access.
2
How do I fix CVE-2025-55370?
To fix CVE-2025-55370, implement proper access controls in the ResourceController.java component of jshERP v3.5.
3
What type of attack does CVE-2025-55370 enable?
CVE-2025-55370 enables unauthorized attackers to access sensitive ID data by manipulating ID values.
4
Which software is affected by CVE-2025-55370?
CVE-2025-55370 affects jshERP version 3.5 due to incorrect access control in specific components.
5
Is CVE-2025-55370 a recent vulnerability?
Yes, CVE-2025-55370 has been identified recently and requires prompt attention to mitigate risks.