Critical severityNVD Advisory· Published Nov 15, 2024· Updated Apr 15, 2026

CVE-2024-52528

Description

Budget Control Gateway acts as an entry point for incoming requests and routes them to the appropriate microservices for Budget Control. Budget Control Gateway does not properly validate auth tokens, which allows attackers to bypass intended restrictions. This vulnerability is fixed in 1.5.2.

Patches

53f094d04bbf

https://github.com/budgetcontrol/gatewayvia osv

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

github.com/BudgetControl/Gateway/security/advisories/GHSA-jqx6-gm7f-vp7mnvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000