Description
A SQL Injection in the users searching REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to read database data via SQL commands injected in the search parameter.
Medium · 4.3
CVE-2023-36652
EUVD-2023-40596GHSA-hqrf-rhj6-c4x4
A SQL Injection in the users searching REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to read data…
Published Dec 12, 2023 · Updated May 27, 2025 · Assigned by mitre