CVE Intelligence

Askbot vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Askbot products: 1 record(s), with severity, exploitation and fixes.

Askbot 1

Exploited only (KEV) →

CVE-2026-1213 Medium · 4.3 CWE-639 Jan 27, 2026
Askbot 0.12.2 - Insecure Direct Object Reference (IDOR)
All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2.