VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 28, 2025· Updated Oct 29, 2025

CVE-2025-60800

CVE-2025-60800

Description

Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • jshERP/jshERPcpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <= commit 90c411a

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.