CVE-2025-60800

n/a / n/a PUBLISHED

Description (CNA)

Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/jishenghua/jshERP/issues/130

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.