CVE Intelligence

Askbot Askbot vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Askbot Askbot: 1 record(s), with affected versions and fixes.
cpe:2.3:a:askbot:askbot

CVE-2026-1213 Medium · 4.3 CWE-639 Jan 27, 2026
Askbot 0.12.2 - Insecure Direct Object Reference (IDOR)
All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2.