VULNERABILITY INTELLIGENCE

CVE-2025-55370

CVSS score8.8 HIGH

EPSS probability0.38%

CISA KEVNot currently listed

Published2025-08-21

Last modified2026-07-05

Description

Incorrect access control in the component \controller\ResourceController.java of jshERP v3.5 allows unauthorized attackers to obtain all the corresponding ID data by modifying the ID value.