PatchTheCVEshilpisoft vulnerabilities
Recent CVEs affecting shilpisoft products. 6 tracked.
shilpisoft has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2024-10-04. Highest priority: CVE-2024-47656 (score 50/100).
- CVE-2024-47657 MEDIUM 6.5 UPGRADE This vulnerability exists in the Shilpi Net Back Office due to improper access controls on certain API endpoin
- CVE-2024-47656 CRITICAL 9.8 UPGRADE This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect login attempts
- CVE-2024-47655 HIGH 8.8 UPGRADE This vulnerability exists in the Shilpi Client Dashboard due to improper validation of files being uploaded ot
- CVE-2024-47654 HIGH 7.5 UPGRADE This vulnerability exists in Shilpi Client Dashboard due to lack of rate limiting and Captcha protection for O
- CVE-2024-47653 MEDIUM 6.5 UPGRADE This vulnerability exists in Shilpi Client Dashboard due to lack of authorization for modification and cancell
- CVE-2024-47652 HIGH 8.1 UPGRADE This vulnerability exists in Shilpi Client Dashboard due to implementation of inadequate authentication mechan
FAQ
How do I fix shilpisoft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is shilpisoft being exploited right now?
None of the tracked shilpisoft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which shilpisoft CVE should I patch first?
CVE-2024-47656 currently ranks highest (50/100): This vulnerability exists in Shilpi Client Dashboard due to missing restrictions for incorrect login attempts .