A vulnerability categorized as critical has been discovered in jshERP 3.5. Impacted is an unknown function of the file controllerSupplierController.java. Such manipulation leads to improper access controls.
This vulnerability is referenced as CVE-2025-55367. It is possible to launch the attack remotely. No exploit is available.