A vulnerability marked as critical has been reported in jshERP 3.5. This affects the function
getAllList of the file /controller/PersonController.java. The manipulation leads to improper access controls.
This vulnerability is listed as CVE-2025-55371. The attack may be initiated remotely. There is no available exploit.
