VULNERABILITY INTELLIGENCE

CVE-2024-52528

CVSS score9.3 CRITICAL

EPSS probability0.57%

CISA KEVNot currently listed

Published2024-11-15

Last modified2026-06-17

Description

Budget Control Gateway acts as an entry point for incoming requests and routes them to the appropriate microservices for Budget Control. Budget Control Gateway does not properly validate auth tokens, which allows attackers to bypass intended restrictions. This vulnerability is fixed in 1.5.2.