CVE-2025-60800 | jshERP GET Request /jshERP-boot/user/info access control

October 28, 2025 Yanac

A vulnerability was found in jshERP. It has been rated as critical. This issue affects some unknown processing of the file /jshERP-boot/user/info of the component GET Request Handler. The manipulation leads to improper access controls.

This vulnerability is listed as CVE-2025-60800. The attack must be carried out from within the local network. There is no available exploit.VulDB Recent EntriesRead More