CVE-2024-0491mediumCWE-640

CVE-2024-0491: fallo de gravedad media en Huaxia ERP

Huaxia ERP UserController.java password recovery

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear ERP

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.6%
A vulnerability classified as problematic has been found in Huaxia ERP up to 3.1. Affected is an unknown function of the file src/main/java/com/jsh/erp/controller/UserController.java. The manipulation leads to weak password recovery. It is possible to launch the attack remotely. Upgrading to version 3.2 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-250596.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Productos afectados
Huaxia · ERP
CVEs relacionadas — Huaxia ERP

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-3826MEDIUMHuaxia ERP Retail Management list information disclosureEPSS 0.8%CVE-2024-0490MEDIUMHuaxia ERP getAllList information disclosureEPSS 0.7%CVE-2022-3825MEDIUMHuaxia ERP User Management sql injectionEPSS 0.7%