Critical · 9.8 CVE-2025-51743 EUVD-2025-199651GHSA-vq83-4r5v-j6xx

An issue was discovered in jishenghua JSH_ERP 2.3.1. The /materialCategory/addMaterialCategory endpoint is vulnerable to fastjson deseriali…

Published Nov 25, 2025 · Updated Nov 26, 2025 · Assigned by mitre

Description

An issue was discovered in jishenghua JSH_ERP 2.3.1. The /materialCategory/addMaterialCategory endpoint is vulnerable to fastjson deserialization attacks.

References

https://gitee.com/jishenghua/JSH_ERP
https://gitee.com/jishenghua
https://blog.hackpax.top/jsh-erp2/
https://gist.github.com/Paxsizy/cd1557aeba8093a8650601c4dbffb6f9