Skip to content
OpenAdvisories
Critical · 9.3 CVE-2024-47656 EUVD-2024-42581GHSA-62pg-77g7-wvwq

User Enumeration vulnerability

Published Oct 4, 2024 · Updated Oct 4, 2024 · Assigned by CERT-In

Description

This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect login attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on password, which could lead to gain unauthorized access to other user accounts.

Affected products

VendorProductAffectedFixed
Shilpi Computers Client Dashboard <9.7.0 —

References