CVE-2023-36646 | BDVDB-2026-218923 Detail

Description#

Incorrect user role checking in multiple REST API endpoints in ProLion CryptoSpike 3.0.15P2 allows a remote attacker with low privileges to execute privileged functions and achieve privilege escalation via REST API endpoint invocation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36646

Exploit#

No public exploit known

History#

Version 12023-12-11Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.