jishenghua JSH_ERP
0 remedies
cpe:2.3:a:jishenghua:jsherp:*:*:*:*:*:*:*
0 remedies
- <= 2.3.1
Jishenghua JSH_ERP Deserialization Vulnerability in User Management Endpoint
Vulnerability
A deserialization vulnerability has been identified in Jishenghua JSH_ERP version 2.3.1. The issue arises in the '/user/addUser' endpoint, which is susceptible to fastjson deserialization attacks. This vulnerability allows for remote code execution.
Impact
Exploitation of this vulnerability could lead to remote code execution on the server where JSH_ERP is running.
Added: Nov 25, 2025, 9:21 PM
Updated: Nov 25, 2025, 10:23 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
6.0remediation
0.0relevance
1.1threat
6.4urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.