https://fluidattacks.com/es/advisories/ghost
Askbot 0.12.2 - Insecure Direct Object Reference (IDOR) | Fluid Attacks
CVE-2026-1213: ASKBOT all versions before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of...
direct objectaskbotinsecurereferenceidor