Read the docs

askbot

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

askbot records in CISA KEV

No askbot vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records

Priority LOW 24

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00356 Published 2026-01-27 Fixed in 0.12.3 CWE-639
Open these records in search →