CVE-2024-47651: high-severity vulnerability in Shilpi Computers Client Dashboard
Parameter Pollution Vulnerability
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.1epss 0.4%
This vulnerability exists in Shilpi Client Dashboard due to improper handling of multiple parameters in the API endpoint. An authenticated remote attacker could exploit this vulnerability by including multiple “userid” parameters in the API request body leading to unauthorized access of sensitive information belonging to other users.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
Affected products
Shilpi Computers · Client DashboardRelated CVEs — Shilpi Computers Client Dashboard
In the same product, most dangerous first.
CVE-2024-47655HIGHUnrestricted File Upload VulnerabilityEPSS 0.7%CVE-2024-47656CRITICALUser Enumeration vulnerabilityEPSS 0.5%CVE-2024-47654HIGHNo Rate Limiting vulnerabilityEPSS 0.5%CVE-2024-47652HIGHInsecure Authentication VulnerabilityEPSS 0.4%CVE-2024-47653HIGHMissing Authorization VulnerabilityEPSS 0.3%