CVE Catalog
CVE-2025-51743
CriticalSummary
In JSH_ERP 2.3.1, the /materialCategory/addMaterialCategory endpoint is vulnerable to fastjson deserialization attacks, potentially allowing remote code execution.
Risk Assessment
The vulnerability could allow an attacker to manipulate material category data and potentially take over the system.
Recommendation
Update the system and restrict access to the endpoint. Use secure data parsing practices.
Original NVD description (English source)
An issue was discovered in jishenghua JSH_ERP 2.3.1. The /materialCategory/addMaterialCategory endpoint is vulnerable to fastjson deserialization attacks.