1. Home
  2. CVE Database
  3. CVE-2026-1213
MEDIUM · 4.3

CVE-2026-1213

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12...

Vulnerability Description

All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
AskbotAskbot<= 0.12.2

Related Weaknesses (CWE)

CWE-639

References

FAQ

What is CVE-2026-1213?

CVE-2026-1213 is a vulnerability with a CVSS score of 4.3 (MEDIUM). All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12...

How severe is CVE-2026-1213?

CVE-2026-1213 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-1213?

Check the references section above for vendor advisories and patch information. Affected products include: Askbot Askbot.