CVE-2023-36646 (published 2023-12-11T00:00:00)
Incorrect user role checking in multiple REST API endpoints in ProLion CryptoSpike 3.0.15P2 allows a remote attacker with low privileges to execute privileged functions and achieve privilege escalation via REST API endpoint invocation.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a