An authorization vulnerability exists in MphRx's Minerva version 3.6.0 at the '/minerva/moUser/update' endpoint. This flaw allows an authenticated user with user modification privileges to escalate their privileges by manipulating the 'identifier' field in an HTTP request. Privilege escalation via the graphical user interface is not possible. The vulnerability has a high severity with a CVSS score of 8.8.