Description
jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to create pre-approved bills by setting status in POST /depotHead/addDepotHeadAndDetail requests. Attackers can supply a status of 1 to skip audit permission checks and multi-level approval workflows, creating audited bills that affect stock and report queries.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| jishenghua | jshERP | ≤ 3.6 | — |
References
- Researcher Proof of Concept exploit
- Vulnerable Code (3.6) technical-description
- Vulnerable Code (3.6) technical-description
- VulnCheck Advisory: jshERP through 3.6 Approval Bypass via addDepotHeadAndDetail Status Parameter third-party-advisory