Threats tagged 'ghsa-cx6j-h838-fr43'

1 threat

Threats tagged 'ghsa-cx6j-h838-fr43'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.4%	CVE-2026-94495jshERP · Missing Authorization High7.1EPSS 0.4%2026-09-21CVE Database V5CVE-2026-94495 jshERP through 3.6 fails to properly validate user privileges in SystemConfigService.updateSystemConfig, allowing authenticated users to modify tenant system configuration. Attackers can rewrite or delete tenant-wide settings covering company identity, stock rules, approval behavior, and printing configuration through the systemConfig endpoint. EPSS 0.4%Vulnerability jishenghua #cwe-862 #ghsa-cx6j-h838-fr43	CVE Database V5	2026-09-21

Showing 1–1 of 1 result