CVE-2024-47653 — Missing Authorization Vulnerability

Back Back to CVE browser

HIGH

Missing Authorization Vulnerability

Published Oct 4, 2024

7.1

HIGH

CVSS 4.0

EPSS 0.34%

Description

This vulnerability exists in Shilpi Client Dashboard due to lack of authorization for modification and cancellation requests through certain API endpoints. An authenticated remote attacker could exploit this vulnerability by placing or cancelling requests through API request body leading to unauthorized modification of requests belonging to the other users.

Affected products

Vendor Shilpi Computers Product Client Dashboard Default
unaffected
- Version
  <9.7.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Shilpi Computers

Client Dashboard

unaffected

Version	Status	Constraints
<9.7.0	affected	-

Remediation

Vendor solution

Upgrade Client Dashboard to version 9.7.0

Metrics

0.34% 0.00341

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00341

Score over time

2024–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (5 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.34% (0.00341)	25.17th	v5 (v2026.06.15)
Jun 15, 2026	0.33% (0.00332)	24.71th	v5 (v2026.06.15)
Mar 17, 2025	0.09% (0.00087)	22.80th	v4 (v2025.03.14)
Dec 12, 2024	0.05% (0.00046)	18.15th	v3 (v2023.03.01)
Oct 5, 2024	0.04% (0.00043)	9.63th	v3 (v2023.03.01)