CVE ID :CVE-2026-59237 Published : July 16, 2026, 3:16 p. m. | 1 hour ago Description :Authorization Bypass Through User-Controlled Key (CWE-639) in the Order and OrderItem REST API controllers in Roskus Prospero Flow CRM before 5.
5.
CVE-2026-59237 - IDOR in Prospero Flow CRM Order API allows cross-tenant read and modification of orders
Originally reported by CVE Recent
0 comments
No comments yet. Be the first to start the discussion.