VULNERABILITY INTELLIGENCE

CVE-2023-36646

CVSS score8.8 HIGH

EPSS probability0.85%

CISA KEVNot currently listed

Published2023-12-12

Last modified2026-06-17

Description

Incorrect user role checking in multiple REST API endpoints in ProLion CryptoSpike 3.0.15P2 allows a remote attacker with low privileges to execute privileged functions and achieve privilege escalation via REST API endpoint invocation.