CVE-2026-1213

N/A

Description

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2.

Details CVE

Score CVSS v3.1N/A

Publie1/27/2026

Derniere modification1/27/2026

Sourcenvd

Observations honeypot0

Faiblesses (CWE)

CWE-639

References

https://askbot.com/(help@fluidattacks.com)

https://fluidattacks.com/advisories/ghost(help@fluidattacks.com)

https://github.com/ASKBOT/askbot-devel/commit/3da3d75f35204aa71633c7a315327ba39cb6295d(help@fluidattacks.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.