Unrated severityNVD Advisory· Published Oct 4, 2024· Updated Oct 4, 2024
Parameter Pollution Vulnerability
CVE-2024-47651
Description
This vulnerability exists in Shilpi Client Dashboard due to improper handling of multiple parameters in the API endpoint. An authenticated remote attacker could exploit this vulnerability by including multiple “userid” parameters in the API request body leading to unauthorized access of sensitive information belonging to other users.
Affected products
1- Range: <9.7.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.cert-in.org.in/s2cMainServletmitrethird-party-advisory
News mentions
0No linked articles in our index yet.