CVE-2024-47657

This vulnerability exists in the Shilpi Net Back Office due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter dfclientid through API request URLs which could lead to unauthorized access to sensitive...

PT-2024-32716 · Unknown · Shilpi Net Back Office

Name of the Vulnerable Software and Affected Versions: Shilpi Net Back Office affected versions not specified Description: This issue exists due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this by manipulating the dfclientid parameter throu...