CVE-2026-1213

N/A

Descricao

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado1/27/2026

Ultima modificacao1/27/2026

Fontenvd

Avistamentos honeypot0

Fraquezas (CWE)

CWE-639

Referencias

https://askbot.com/(help@fluidattacks.com)

https://fluidattacks.com/advisories/ghost(help@fluidattacks.com)

https://github.com/ASKBOT/askbot-devel/commit/3da3d75f35204aa71633c7a315327ba39cb6295d(help@fluidattacks.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.