Huaxiaerp Jsherp
2 CVEs affecting Huaxiaerp Jsherp. Latest disclosed: 2024-02-06. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-24000 | Critical | 9.8 | 2024-02-06 | jshERP v3.3 is vulnerable to Arbitrary File Upload. The jshERP-boot/systemConfig/upload interface does not check the uploaded file type, and the biz parameter… |
CVE-2023-48894 | Medium | 6.5 | 2023-11-30 | Incorrect Access Control vulnerability in jshERP V3.3 allows attackers to obtain sensitive information via the doFilter function. |