Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Askbot 0.12.2 - Insecure Direct Object Reference (IDOR)
Vulnerability Description
All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2.
CVSS Information
N/A
Vulnerability Type
通过用户控制密钥绕过授权机制
Vulnerability Title
Askbot 安全漏洞
Vulnerability Description
Askbot是ASKBOT开源的一个问答平台。 askbot 0.12.2及之前版本存在安全漏洞，该漏洞源于访问控制不当，可能导致修改其他用户个人资料图片。
CVSS Information
N/A
Vulnerability Type
N/A