Huaxiaerp vulnerabilities
We track 3 vulnerabilities in Huaxiaerp products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 6, 2024.
Latest Huaxiaerp vulnerabilities
- 9.8 Critical severity
Jsherp: Unrestricted Upload of File with Dangerous Type
jshERP v3.3 is vulnerable to Arbitrary File Upload. The jshERP-boot/systemConfig/upload interface does not check the uploaded file type, and the biz parameter can be spliced into the upload path, resulting in arbitrary file uploads with controllable paths.
- 7.5 High severity
ERP: Weak Password Recovery Mechanism for Forgotten Password
A vulnerability classified as problematic has been found in Huaxia ERP up to 3.1. Affected is an unknown function of the file src/main/java/com/jsh/erp/controller/UserController.java. The manipulation leads to weak password recovery. It is possible to launch t
- 7.5 High severity
ERP: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was found in Huaxia ERP up to 3.1. It has been rated as problematic. This issue affects some unknown processing of the file /user/getAllList. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit ha