CVE-2024-47654 — No Rate Limiting vulnerability

CVE-2024-47654

No Rate Limiting vulnerability PUBLISHED

Description (CNA)

This vulnerability exists in Shilpi Client Dashboard due to lack of rate limiting and Captcha protection for OTP requests in certain API endpoint. An unauthenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoints, which could lead to the OTP bombing on the targeted system.

Affected (CNA)

Vendor / product	Versions
Shilpi Computers / Client Dashboard	affected <9.7.0

CWE

CWE-799

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0313

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.