CVE-2023-36652

Summary

CVE-2023-36652 is a SQL Injection vulnerability affecting the users searching REST API endpoint in ProLion CryptoSpike 3.0.15P2. This issue allows authenticated attackers to inject SQL commands into the search parameter and gain unauthorized access to database data. The vulnerability could potentially lead to the exposure of sensitive information or data manipulation, posing a significant security risk to affected systems. ProLion is advised to apply the necessary patches to mitigate this issue promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.