| Package | Affected versions | Patched versions |
|---|---|---|
| jsherp | = 3.5 |
Incorrect access control in the component \controller\RoleController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free