Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:37:04 +0000 CVE-2026-1213 — Askbot 0.12.2 - Insecure Direct Object Reference (IDOR) https://cve.radiocsirt.org/vuln/cve-2026-1213 <p><strong>Affected:</strong> askbot</p> <p>All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2.</p> <p><strong>Affected:</strong> askbot</p> <p>All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2.</p> https://cve.radiocsirt.org/vuln/cve-2026-1213 GHSA-r2jv-fwfr-4j8c — askbot inexhaustive permissions check allows any user to modify a different user's profile picture https://cve.radiocsirt.org/vuln/ghsa-r2jv-fwfr-4j8c <p><strong>Affected:</strong> PyPI: askbot</p> <p>All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users. This issue affects askbot: 0.12.2.</p> <p><strong>Affected:</strong> PyPI: askbot</p> <p>All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users. This issue affects askbot: 0.12.2.</p> https://cve.radiocsirt.org/vuln/ghsa-r2jv-fwfr-4j8c