Lucene search

K
cvelistMitreCVELIST:CVE-2023-36646
HistoryDec 11, 2023 - 12:00 a.m.

CVE-2023-36646

2023-12-1100:00:00
mitre
www.cve.org
1
cve-2023-36646
user role checking
rest api
privilege escalation

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

44.2%

Incorrect user role checking in multiple REST API endpoints in ProLion CryptoSpike 3.0.15P2 allows a remote attacker with low privileges to execute privileged functions and achieve privilege escalation via REST API endpoint invocation.

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

44.2%

Related for CVELIST:CVE-2023-36646