CVE-2026-42516
HighSummary
This vulnerability in e-Sushrut is due to improper authorization checks during resource access.
Risk Assessment
An authenticated attacker can manipulate encoded parameters in request URLs to gain unauthorized access to patient accounts.
Recommendation
Implement proper server-side authorization mechanisms and verify permissions for each request.
Other vulnerabilities in e-Sushrut
See all- CVE-2026-42518High
This vulnerability in e-Sushrut is due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript.
- CVE-2026-42517High
This vulnerability in e-Sushrut is due to the use of reversible Base64 encoding for protecting sensitive data.
- CVE-2026-42515High
This vulnerability in e-Sushrut is due to improper access control in resource access validation.
- CVE-2026-42514High
This vulnerability in e-Sushrut is due to exposure of OTPs in plaintext within API responses.
- CVE-2026-42513High
This vulnerability in e-Sushrut is due to improper authentication logic that relies on client-side response parameters to determine authentication status.
Original NVD description (English source)
This vulnerability exists in e-Sushrut due to improper authorization checks during resource access. An authenticated attacker could exploit this vulnerability by manipulating encoded parameters in the request URL to gain unauthorized access to patient accounts on the targeted system.