A critical access control flaw in jshERP allows unauthenticated attackers to remotely exfiltrate sensitive user data.

The application fails to perform proper authorization checks on the /jshERP-boot/user/info endpoint, permitting unauthenticated remote attackers to perform unauthorized data retrieval.

This vulnerability carries a CVSS score of 7.5, reflecting its high potential for unauthorized information disclosure. Successful exploitation could lead to the exposure of sensitive user data, potentially facilitating further attacks, identity theft, or significant reputational damage to the organization.

Immediate Action: Restrict network access to the jshERP management interface until the vendor provides a formal patch for commit 90c411a and subsequent versions.

Proactive Monitoring: Review web server and application access logs for suspicious GET requests targeting the /jshERP-boot/user/info endpoint, particularly from unauthorized or external IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to block or challenge traffic directed at the vulnerable /jshERP-boot/user/info endpoint.

Public Exploit Available: Unknown

Given the ease of exploitation and the potential for sensitive data exposure, security teams must treat this vulnerability with high priority. Organizations should immediately restrict access to the affected interface and monitor for suspicious activity while awaiting an official patch from the vendor.