CVE-2023-48894: Huaxiaerp Jsherp

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Incorrect Access Control vulnerability in jshERP V3.3 allows attackers to obtain sensitive information via the doFilter function.

Affected products

• Huaxiaerp Jsherp: version 3.3 only

Published 2023-11-30. Last modified 2026-06-17.