CVE-2024-47651

Summary

CVE-2024-47651 is a newly disclosed vulnerability affecting the Shilpi Client Dashboard. The issue lies in the improper handling of multiple "userid" parameters in the API endpoint. Maliciously crafted API requests can exploit this vulnerability, allowing an authenticated attacker to gain unauthorized access to sensitive information belonging to other users. The scope of potential impact includes unintended data exposure and potential privacy breaches. Organizations utilizing the Shilpi Client Dashboard are urged to apply necessary patches or mitigations promptly to minimize risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.