CVE-2023-36646

Incorrect user role checking in multiple REST API endpoints in ProLion CryptoSpike 3.0.15P2 allows a remote attacker with low privileges to execute privileged…

published December 11, 2023

CVSS
—
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

Incorrect user role checking in multiple REST API endpoints in ProLion CryptoSpike 3.0.15P2 allows a remote attacker with low privileges to execute privileged functions and achieve privilege escalation via REST API endpoint invocation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00847 · 57.7th percentile
Published
2023-12-11T00:00Z
EPSS history
Timeline
  • 11 DEC 00:00Z
    Incorrect user role checking in multiple REST API endpoints in ProLion CryptoSpike 3.0.15P2 allows a remote attacker with low privileges to execute privileged…
    cvelistv5