Cube Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Cube versions 0.27.19 prior to 1.5.13, as well as in versions 1.4.2 and 1.0.14. The issue arises from the ability to send a specially crafted request with a valid API token, leading to unauthorized privilege escalation.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation.

Remediation

Users can upgrade to Cube version 1.5.13 or later, version 1.4.2 (active LTS release), or version 1.0.14 (end-of-life LTS release) to address this vulnerability.