← Vulnerability feed

Vulnerability record · CVE-2025-51742 · published 25 November 2025

CVE-2025-51742: Jishenghua jsherp deserialization of untrusted data vulnerability

JJishenghua · Jsherp

An issue was discovered in jishenghua JSH_ERP 2.3.1. The /material/getMaterialEnableSerialNumberList endpoint passes the search query parameter directly to parseObject(), introducing a Fastjson deserialization vulnerability that can lead to RCE via JDBC payloads.

9.8 CVSS 3.1 Critical EPSS 0.48% · top 61.3% CWE-502 · Deserialization of untrusted data
9.8CVSS 3.1 base score
0.48%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

An issue was discovered in jishenghua JSH_ERP 2.3.1. The /material/getMaterialEnableSerialNumberList endpoint passes the search query parameter directly to parseObject(), introducing a Fastjson deserialization vulnerability that can lead to RCE via JDBC payloads.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://blog.hackpax.top/jsh-erp/ Broken Link
https://gist.github.com/Paxsizy/a40334ffa7f05c42bf0348833f830108 Third Party Advisory
https://gitee.com/jishenghua Product
https://gitee.com/jishenghua/JSH_ERP Product

Track CVE-2025-51742 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2025-51744Jishenghua jsherp deserialization of untrusted data vulnerabilityAn issue was discovered in jishenghua JSH_ERP 2.3.1. The /user/addUser endpoint is vulnerable to fastjson deserialization attacks.EPSS 0.48%9.8CVE-2025-51745Jishenghua jsherp deserialization of untrusted data vulnerabilityAn issue was discovered in jishenghua JSH_ERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks.EPSS 0.48%9.8CVE-2025-51746Jishenghua jsherp deserialization of untrusted data vulnerabilityAn issue was discovered in jishenghua JSH_ERP 2.3.1. The /serialNumber/addSerialNumber endpoint is vulnerable to fastjson deserialization attacks.EPSS 0.48%9.8CVE-2025-51743Jishenghua jsherp deserialization of untrusted data vulnerabilityAn issue was discovered in jishenghua JSH_ERP 2.3.1. The /materialCategory/addMaterialCategory endpoint is vulnerable to fastjson deserialization att…EPSS 0.48%9.8CVE-2024-24003Jishenghua jsherp sql injection vulnerabilityjshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutMaterialCount…EPSS 0.80%9.8CVE-2024-24001Jishenghua jsherp sql injection vulnerabilityjshERP v3.3 is vulnerable to SQL Injection. via the com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findallocationDeta…EPSS 0.68%9.8CVE-2024-24002Jishenghua jsherp sql injection vulnerabilityjshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.MaterialController: com.jsh.erp.utils.BaseResponseInfo getListWithStock() func…EPSS 0.77%9.8CVE-2024-24004Jishenghua jsherp sql injection vulnerabilityjshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutDetail() func…EPSS 0.68%

Source: NIST National Vulnerability Database (record CVE-2025-51742), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.