ERP vulnerabilities

2 known vulnerabilities in ERP from Huaxia. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  ERP: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2024-0491Jan 13, 2024Huaxia

  A vulnerability classified as problematic has been found in Huaxia ERP up to 3.1. Affected is an unknown function of the file src/main/java/com/jsh/erp/controller/UserController.java. The manipulation leads to weak password recovery. It is possible to launch t

• 7.5 High severity

  ERP: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-0490Jan 13, 2024Huaxia

  A vulnerability was found in Huaxia ERP up to 3.1. It has been rated as problematic. This issue affects some unknown processing of the file /user/getAllList. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit ha