Threats tagged 'ghsa-3chc-24g6-56gr'

1 threat

Threats tagged 'ghsa-3chc-24g6-56gr'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.3	EPSS 0.5%	CVE-2026-94497jshERP · Authorization Bypass Through User-Controlled Key High8.3EPSS 0.5%2026-09-21CVE Database V5CVE-2026-94497 jshERP through 3.6 fails to validate object ownership in by-id info, update, and delete endpoints across multiple resource types. Authenticated users can read, modify, and delete other users' business objects by submitting direct object identifiers without authorization checks. EPSS 0.5%Vulnerability jishenghua #cwe-639 #ghsa-3chc-24g6-56gr	CVE Database V5	2026-09-21

Showing 1–1 of 1 result