CVE-2026-1213

N/A

Description

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2.

CVE Details

CVSS v3.1 ScoreN/A

Published1/27/2026

Last Modified1/27/2026

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-639

References

https://askbot.com/(help@fluidattacks.com)

https://fluidattacks.com/advisories/ghost(help@fluidattacks.com)

https://github.com/ASKBOT/askbot-devel/commit/3da3d75f35204aa71633c7a315327ba39cb6295d(help@fluidattacks.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.