1. Home
  2. CVE Database
  3. CVE-2024-47656
CRITICAL · 9.8

CVE-2024-47656

This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect login attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a...

Vulnerability Description

This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect login attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on password, which could lead to gain unauthorized access to other user accounts.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ShilpisoftClient Dashboard< 9.7.0

Related Weaknesses (CWE)

CWE-307

References

FAQ

What is CVE-2024-47656?

CVE-2024-47656 is a vulnerability with a CVSS score of 9.8 (CRITICAL). This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect login attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a...

How severe is CVE-2024-47656?

CVE-2024-47656 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2024-47656?

Check the references section above for vendor advisories and patch information. Affected products include: Shilpisoft Client Dashboard.