| Package | Affected versions | Patched versions |
|---|---|---|
| jsherp | = 3.5 |
Incorrect access control in the component \controller\ResourceController.java of jshERP v3.5 allows unauthorized attackers to obtain all the corresponding ID data by modifying the ID value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free