Read the docs

Shilpi Computers

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Shilpi Computers records in CISA KEV

No Shilpi Computers vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Client Dashboard 5 records MEDIUM Capexweb 1 record LOW Net Back Office 1 record LOW

Records

5 records in Client Dashboard · all components

TI-2024-31935 CVE-2024-47656 · GHSA-62pg-77g7-wvwq

User Enumeration vulnerability

Priority MEDIUM 49

This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect login attempts on its API based login.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00507 Published 2024-10-04 Fixed in 9.7.0 CWE-307
TI-2024-31934 CVE-2024-47655 · GHSA-xfh8-7hcx-ppfp

Unrestricted file upload in Shilpi Computers Client Dashboard

Priority MEDIUM 40

This vulnerability exists in the Shilpi Client Dashboard due to improper validation of files being uploaded other than the specified extension.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00691 Published 2024-10-04 Fixed in 9.7.0 CWE-434
TI-2024-31931 CVE-2024-47652 · GHSA-vx6r-82hr-hr24

Insecure authentication in Shilpi Computers Client Dashboard

Priority LOW 35

This vulnerability exists in Shilpi Client Dashboard due to implementation of inadequate authentication mechanism in the login module wherein access to any users account is granted with just their corresponding mobile nu…

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00413 Published 2024-10-04 Fixed in 9.7.0 CWE-308
TI-2024-31933 CVE-2024-47654 · GHSA-8xx5-ghfp-wg5c

No Rate Limiting vulnerability

Priority LOW 32

This vulnerability exists in Shilpi Client Dashboard due to lack of rate limiting and Captcha protection for OTP requests in certain API endpoint.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00492 Published 2024-10-04 Fixed in 9.7.0 CWE-799
TI-2024-31932 CVE-2024-47653 · GHSA-7r7x-w2qg-cx77

Missing authorization in Shilpi Computers Client Dashboard

Priority LOW 31

This vulnerability exists in Shilpi Client Dashboard due to lack of authorization for modification and cancellation requests through certain API endpoints.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00341 Published 2024-10-04 Fixed in 9.7.0 CWE-266
Open these records in search →