VYPR
← All advisories
Critical severityOSV Advisory· Published Nov 15, 2024· Updated Jun 17, 2026

CVE-2024-52528

CVE-2024-52528

Description

Budget Control Gateway acts as an entry point for incoming requests and routes them to the appropriate microservices for Budget Control. Budget Control Gateway does not properly validate auth tokens, which allows attackers to bypass intended restrictions. This vulnerability is fixed in 1.5.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Budgetcontrol/GatewayOSV2 versions
    v0.1, v0.2, v1.0, …+ 1 more
    • (no CPE)range: v0.1, v0.2, v1.0, …
    • (no CPE)range: <1.5.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.