Description
An issue was discovered in jishenghua JSH_ERP 2.3.1. The /serialNumber/addSerialNumber endpoint is vulnerable to fastjson deserialization attacks.
Critical · 9.8
CVE-2025-51746
EUVD-2025-199648GHSA-6rmw-x686-5x74
An issue was discovered in jishenghua JSH_ERP 2.3.1. The /serialNumber/addSerialNumber endpoint is vulnerable to fastjson deserialization a…
Published Nov 25, 2025 · Updated Nov 26, 2025 · Assigned by mitre