CVE-2026-1213

N/A

Beschreibung

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht1/27/2026

Zuletzt geandert1/27/2026

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-639

Referenzen

https://askbot.com/(help@fluidattacks.com)

https://fluidattacks.com/advisories/ghost(help@fluidattacks.com)

https://github.com/ASKBOT/askbot-devel/commit/3da3d75f35204aa71633c7a315327ba39cb6295d(help@fluidattacks.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.