Threats tagged 'ghsa-73pr-pmq3-3g3w'

1 threat

Threats tagged 'ghsa-73pr-pmq3-3g3w'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.0	EPSS 0.4%	CVE-2026-94494jshERP · Authorization Bypass Through User-Controlled Key Medium5.0EPSS 0.4%2026-09-21CVE Database V5CVE-2026-94494 jshERP through 3.6 contains a tenant isolation bypass vulnerability that allows authenticated users to read other tenants' records via the GET /tenant/info endpoint. Attackers can iterate the primary key to enumerate and access sensitive tenant data including login names, validity dates, user quotas, and enabled state across all platform tenants. EPSS 0.4%Vulnerability jishenghua #cwe-639 #ghsa-73pr-pmq3-3g3w	CVE Database V5	2026-09-21

Showing 1–1 of 1 result