critical9.8
CVE-2024-47656
This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect login attempts on its API based login.
Impact
This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect login attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on password, which could lead to gain unauthorized access to other user accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shilpisoft | Client Dashboard | before 9.7.0 |