CVE-2024-47654
No Rate Limiting vulnerability
- State
- Published
- Severity
- 7.1 High
- Published
- Oct 4, 2024
- Updated
- Oct 4, 2024
- Reserved
- Sep 30, 2024
Description
This vulnerability exists in Shilpi Client Dashboard due to lack of rate limiting and Captcha protection for OTP requests in certain API endpoint. An unauthenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoints, which could lead to the OTP bombing on the targeted system.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.1 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | CERT-In |
Weaknesses
- CWE-799 Improper Control of Interaction Frequency
Affected Products
| Product | Versions |
|---|---|
Client DashboardShilpi Computers |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.