Stored SSRF in jshERP: Attack Chain & POC Analysis

github.com 2026-06-13查看中文 →

Security AdvisoryHighjshERP

Affected:

jshERP <= 3.6

Referenced CVEs: CVE-2026-11469 · 4.7

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Moodle O365 Plugin JWT Verification Bypass Fix 2026-07-17 Moodle local_o365 CVE-2025-54733 Critical Auth Bypass via Unverified JWT Signature 2026-07-17 Fix: RCE in @prompty/core via untrusted JavaScript frontmatter in .prompty files 2026-07-17 Moodle Plugin SSRF and OAuth Token Leak Fixes: repository_office365 and local_o365 2026-07-17 Promptly Arbitrary File Read via ${file:...} Expansion (CVE-2026-5598) 2026-07-17

Offline Archive

Offline screenshot & PDF are Pro-exclusive