CVE-2026-42517
HighSummary
This vulnerability in e-Sushrut is due to the use of reversible Base64 encoding for protecting sensitive data.
Risk Assessment
An authenticated attacker can decode and manipulate Base64-encoded parameters in request URLs to gain unauthorized access to sensitive information.
Recommendation
Use secure encryption instead of Base64 for protecting data and conduct a security audit of the application.
Other vulnerabilities in e-Sushrut
See all- CVE-2026-42518High
This vulnerability in e-Sushrut is due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript.
- CVE-2026-42516High
This vulnerability in e-Sushrut is due to improper authorization checks during resource access.
- CVE-2026-42515High
This vulnerability in e-Sushrut is due to improper access control in resource access validation.
- CVE-2026-42514High
This vulnerability in e-Sushrut is due to exposure of OTPs in plaintext within API responses.
- CVE-2026-42513High
This vulnerability in e-Sushrut is due to improper authentication logic that relies on client-side response parameters to determine authentication status.
Original NVD description (English source)
This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data. An authenticated attacker could exploit this vulnerability by decoding and manipulating Base64-encoded parameters in the request URL to gain unauthorized access to sensitive information on the targeted system.