Unrated severityNVD Advisory· Published Nov 25, 2025· Updated Nov 26, 2025
CVE-2025-51742
CVE-2025-51742
Description
An issue was discovered in jishenghua JSH_ERP 2.3.1. The /material/getMaterialEnableSerialNumberList endpoint passes the search query parameter directly to parseObject(), introducing a Fastjson deserialization vulnerability that can lead to RCE via JDBC payloads.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- jishenghua/JSH_ERPdescription
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.