| Package | Affected versions | Patched versions |
|---|---|---|
| jsherp | = 3.5 |
Incorrect access control in the component /controller/PersonController.java of jshERP v3.5 allows unauthorized attackers to obtain all the information of the handler by executing the getAllList method.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free