Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-47656

User Enumeration vulnerability

Description

This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect login attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on password, which could lead to gain unauthorized access to other user accounts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Shilpi Computers Client Dashboard

Default version status: unaffected

  • <9.7.0affected

References