Vulnerabilidades de Jishenghua
CVEs publicadas que afetam produtos de Jishenghua: 37 registro(s), com severidade, exploração e correções.
CVE-2026-1588
Baixa · 2.7
CWE-22 29/01/2026
jishenghua jshERP installByPath install path traversal
A vulnerability was found in jishenghua jshERP up to 3.6. The impacted element is the function install of the file /jshERP-boot/plugin/installByPath of the component com.gitee.starblues.integration.operator.DefaultPluginOperator. The manipulation of the argument path results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-1549
Média · 4.3
CWE-22 28/01/2026
jishenghua jshERP PluginController uploadPluginConfigFile path traversal
A vulnerability was identified in jishenghua jshERP up to 3.6. Affected by this vulnerability is an unknown functionality of the file /jshERP-boot/plugin/uploadPluginConfigFile of the component PluginController. Such manipulation of the argument configFile leads to path traversal. The attack may be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-1546
Crítica · 9.8
CWE-89 28/01/2026
Injeção de SQL no jshERP da Jishenghua via importação de itens em Excel (CVE-2026-1546)
Foi detectada uma vulnerabilidade de segurança no jshERP da jishenghua até a versão 3.6. O elemento afetado é a função getBillItemByParam do arquivo /jshERP-boot/depotItem/importItemExcel do componente com.jsh.erp.datasource.mappers.DepotItemMapperEx. A manipulação do argumento barCodes leva a injeção de SQL. É possível iniciar o ataque remotamente. O exploit foi divulgado publicamente e pode ser usado. O projeto foi informado do problema antecipadamente por meio de um relatório de issue, mas ainda não respondeu.
CVE-2025-67344
Média · 4.6
CWE-79 12/12/2025
jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the ...
jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint.
CVE-2025-67341
Média · 4.6
CWE-79 12/12/2025
jshERP versions 3.5 and earlier are affected by a stored XSS vulnerability. This vulnerability...
jshERP versions 3.5 and earlier are affected by a stored XSS vulnerability. This vulnerability allows attackers to upload PDF files containing XSS payloads. Additionally, these PDF files can be accessed via static URLs, making them accessible to all users.
CVE-2025-51746
Crítica · 9.8
CWE-502 25/11/2025
Deserialization of Untrusted Data em Jishenghua Jsherp
An issue was discovered in jishenghua JSH_ERP 2.3.1. The /serialNumber/addSerialNumber endpoint is vulnerable to fastjson deserialization attacks.
CVE-2025-51745
Crítica · 9.8
CWE-502 25/11/2025
Deserialization of Untrusted Data em Jishenghua Jsherp
An issue was discovered in jishenghua JSH_ERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks.
CVE-2025-51744
Crítica · 9.8
CWE-502 25/11/2025
Deserialization of Untrusted Data em Jishenghua Jsherp
An issue was discovered in jishenghua JSH_ERP 2.3.1. The /user/addUser endpoint is vulnerable to fastjson deserialization attacks.
CVE-2025-51743
Crítica · 9.8
CWE-502 25/11/2025
Deserialization of Untrusted Data em Jishenghua Jsherp
An issue was discovered in jishenghua JSH_ERP 2.3.1. The /materialCategory/addMaterialCategory endpoint is vulnerable to fastjson deserialization attacks.
CVE-2025-51742
Crítica · 9.8
CWE-502 25/11/2025
Deserialization of Untrusted Data em Jishenghua Jsherp
An issue was discovered in jishenghua JSH_ERP 2.3.1. The /material/getMaterialEnableSerialNumberList endpoint passes the search query parameter directly to parseObject(), introducing a Fastjson deserialization vulnerability that can lead to RCE via JDBC payloads.
CVE-2025-60800
Alta · 7.5
CWE-284 28/10/2025
Improper Access Control em Jishenghua Jsherp
Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request.
CVE-2025-60801
Alta · 8.2
CWE-77 24/10/2025
Command Injection em Jishenghua Jsherp
jshERP up to commit fbda24da was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the jsh_erp function.