Mulail Mohamed

**Name of the Vulnerable Software and Affected Versions** MONyog Ultimate version 6.63 **Description** A critical issue was discovered, affecting the Cookie Handler component. The manipulation of the `HasServerEdit/IsAdmin` argument can lead to privilege escalation. This issue can be exploited remotely. **Recommendations** For MONyog Ultimate version 6.63, consider restricting access to the Cookie Handler component until a patch is available. As a temporary workaround, avoid using the `HasServerEdit/IsAdmin` argument in sensitive operations to minimize the risk of exploitation.