An issue was discovered in jishenghua JSH_ERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks.

Published Nov 25, 2025 · Updated Nov 26, 2025 · Assigned by mitre