| Package | Affected versions | Patched versions |
|---|---|---|
| askbot | < 0.12.3 | 0.12.3 |
| askbot | ≤ 0.12.2 |
All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users. This issue affects askbot: 0.12.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free