CVE-2026-42517 | BDVDB-2026-329660 Detail
CDAC-Noidae-Sushrut, Hospital Management Information System (HMIS)
Description#
This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data. An authenticated attacker could exploit this vulnerability by decoding and manipulating Base64-encoded parameters in the request URL to gain unauthorized access to sensitive information on the targeted system.
Impact#
CAPEC-566 Authorization Bypass Through Parameter Manipulation
Weaknesses#
- CWE-639 Authorization Bypass Through User-Controlled Key
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.