What is CVE-2024-47651?

CVE-2024-47651 is a medium-severity vulnerability in Shilpi Client Dashboard, classified under CWE-235. CVSS score: 6.5/10. Published 2024-10-04.

How severe is CVE-2024-47651?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Shilpi Client Dashboard

CVE-2024-47651

This vulnerability exists in Shilpi Client Dashboard due to improper handling of multiple parameters in the API endpoint. An authenticated remote attacker could exploit this vulnerability by including multiple “userid” parameters in the API request body leading to unauthorized access of sensitive information belonging to other users.

EPSS: 0.004 (36.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Shilpi Client_dashboard
Shilpi Computers Client Dashboard — versions <9.7.0

Weakness classification (CWE)

CWE-235

References

vdisclose@cert-in.org.in (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2024-47651?: CVE-2024-47651 is a medium-severity vulnerability in Shilpi Client Dashboard, classified under CWE-235. CVSS score: 6.5/10. Published 2024-10-04.
How severe is CVE-2024-47651?: Medium severity. CVSS v3 base score is 6.5 out of 10.