Unrated

Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a...

CVE-2025-60800 First seen on SecPulse Oct 28, 2025

Original description The description as published by the source.

Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
report github.com

Key facts

Severity: Unrated
Published: Oct 28, 2025
First seen on SecPulse: Oct 28, 2025

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:11