Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: Shilpi Computers Clear all filters
TI-2024-31936 CVE-2024-47657 · GHSA-74xr-gj9j-429c

Improper access control in Shilpi Computers Net Back Office

Priority LOW 31

This vulnerability exists in the Shilpi Net Back Office due to improper access controls on certain API endpoints.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00387 Published 2024-10-04 Fixed in 5.5.002 CWE-639
TI-2024-31935 CVE-2024-47656 · GHSA-62pg-77g7-wvwq

User Enumeration vulnerability

Priority MEDIUM 49

This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect login attempts on its API based login.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00507 Published 2024-10-04 Fixed in 9.7.0 CWE-307
TI-2024-31934 CVE-2024-47655 · GHSA-xfh8-7hcx-ppfp

Unrestricted file upload in Shilpi Computers Client Dashboard

Priority MEDIUM 40

This vulnerability exists in the Shilpi Client Dashboard due to improper validation of files being uploaded other than the specified extension.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00691 Published 2024-10-04 Fixed in 9.7.0 CWE-434
TI-2024-31933 CVE-2024-47654 · GHSA-8xx5-ghfp-wg5c

No Rate Limiting vulnerability

Priority LOW 32

This vulnerability exists in Shilpi Client Dashboard due to lack of rate limiting and Captcha protection for OTP requests in certain API endpoint.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00492 Published 2024-10-04 Fixed in 9.7.0 CWE-799
TI-2024-31932 CVE-2024-47653 · GHSA-7r7x-w2qg-cx77

Missing authorization in Shilpi Computers Client Dashboard

Priority LOW 31

This vulnerability exists in Shilpi Client Dashboard due to lack of authorization for modification and cancellation requests through certain API endpoints.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00341 Published 2024-10-04 Fixed in 9.7.0 CWE-266
TI-2024-31931 CVE-2024-47652 · GHSA-vx6r-82hr-hr24

Insecure authentication in Shilpi Computers Client Dashboard

Priority LOW 35

This vulnerability exists in Shilpi Client Dashboard due to implementation of inadequate authentication mechanism in the login module wherein access to any users account is granted with just their corresponding mobile nu…

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00413 Published 2024-10-04 Fixed in 9.7.0 CWE-308
TI-2024-31930 CVE-2024-47651 · GHSA-2j74-3g9x-9cw4

Parameter Pollution Vulnerability

Priority LOW 32

This vulnerability exists in Shilpi Client Dashboard due to improper handling of multiple parameters in the API endpoint.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00432 Published 2024-10-04 Fixed in 9.7.0 CWE-235