CVE-2024-47652

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

This vulnerability exists in Shilpi Client Dashboard due to implementation of inadequate authentication mechanism in the login module wherein access to any users account is granted with just their corresponding mobile number. A remote attacker could exploit this vulnerability by providing mobile number of targeted user, to obtain complete access to the targeted user account.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-308

Affected software

No affected versions have been published.

Timeline

Published: Oct 4, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-476536.5This vulnerability exists in Shilpi Client Dashboard due to lack of authorization for modification and cancellation requests through certain CVE-2024-476547.5This vulnerability exists in Shilpi Client Dashboard due to lack of rate limiting and Captcha protection for OTP requests in certain API end CVE-2024-476558.8This vulnerability exists in the Shilpi Client Dashboard due to improper validation of files being uploaded other than the specified extensi CVE-2024-476569.8This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect login attempts on its API based login. A remo CVE-2024-476576.5This vulnerability exists in the Shilpi Net Back Office due to improper access controls on certain API endpoints. An authenticated remote at CVE-2024-476585.5In the Linux kernel, the following vulnerability has been resolved: crypto: stm32/cryp - call finalize with bh disabled The finalize opera CVE-2024-476598.8In the Linux kernel, the following vulnerability has been resolved: smack: tcp: ipv4, fix incorrect labeling Currently, Smack mirrors the CVE-2024-47664.3Different techniques existed to obscure the fullscreen notification in Firefox for Android. These could have led to potential user confusio CVE-2024-476604.7In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENT_WATCHED flags lazily In some setups directories CVE-2024-476615.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid overflow from uint32_t to uint8_t [WHAT & HOW] CVE-2024-476625.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection CVE-2024-476635.5In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9834: Validate frequency parameter value In