Critical severityOSV Advisory· Published Nov 15, 2024· Updated Apr 15, 2026

CVE-2024-52528

Description

Budget Control Gateway acts as an entry point for incoming requests and routes them to the appropriate microservices for Budget Control. Budget Control Gateway does not properly validate auth tokens, which allows attackers to bypass intended restrictions. This vulnerability is fixed in 1.5.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Budgetcontrol/GatewayOSV
Range: v0.1, v0.2, v1.0, …

Patches

Vulnerability mechanics

References

github.com/BudgetControl/Gateway/security/advisories/GHSA-jqx6-gm7f-vp7mnvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000