CVE-2024-24002

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-24002
jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.MaterialController: com.jsh.erp.utils.BaseResponseInfo getListWithStock() function of jshERP does not filter `column` and `order` parameters well enough, and an attacker can construct malicious payload to bypass jshERP's protection mechanism in `safeSqlParse` method for sql injection.

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/jishenghua/jshERP/issues/99 Exploit Vendor Advisory
https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24002.txt Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:jishenghua:jsherp:3.3:*:*:*:*:*:*:*
History

09 Feb 2024, 02:10

Type Values Removed Values Added
CPE cpe:2.3:a:jishenghua:jsherp:3.3:*:*:*:*:*:*:*
CWE CWE-89
First Time Jishenghua jsherp
Jishenghua
References () https://github.com/jishenghua/jshERP/issues/99 - () https://github.com/jishenghua/jshERP/issues/99 - Exploit, Vendor Advisory
References () https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24002.txt - () https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24002.txt - Third Party Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8

07 Feb 2024, 00:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-07 00:15

Updated : 2024-08-26 20:35

NVD link : CVE-2024-24002

Mitre link : CVE-2024-24002

JSON object : View

Products Affected

jishenghua

  • jsherp
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')