ajax/profile-picture-upload.php in Bludit 3.10.0 allows authenticated users to change other users' profile pictures.

Published Feb 7, 2020 · Updated Aug 4, 2024 · Assigned by mitre