CVE-2025-55367

Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier…

Medium · published August 21, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
23.2
In the wild
Unconfirmed
What it is

Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00315 · 23.2th percentile
Published
2025-08-21T00:00Z
EPSS history
Timeline
  • 21 AUG 00:00Z
    Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier…
    cvelistv5