CVE-2024-47652: high-severity vulnerability in Shilpi Computers Client Dashboard
Insecure Authentication Vulnerability
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.6epss 0.4%
This vulnerability exists in Shilpi Client Dashboard due to implementation of inadequate authentication mechanism in the login module wherein access to any users account is granted with just their corresponding mobile number. A remote attacker could exploit this vulnerability by providing mobile number of targeted user, to obtain complete access to the targeted user account.
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:N
Affected products
Shilpi Computers · Client DashboardRelated CVEs — Shilpi Computers Client Dashboard
In the same product, most dangerous first.
CVE-2024-47655HIGHUnrestricted File Upload VulnerabilityEPSS 0.7%CVE-2024-47656CRITICALUser Enumeration vulnerabilityEPSS 0.5%CVE-2024-47654HIGHNo Rate Limiting vulnerabilityEPSS 0.5%CVE-2024-47651HIGHParameter Pollution VulnerabilityEPSS 0.4%CVE-2024-47653HIGHMissing Authorization VulnerabilityEPSS 0.3%