Product by Cozmoslabs

    User Profile Picture

    4 known vulnerabilities in User Profile Picture (Cozmoslabs), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in User Profile Picture (Cozmoslabs)
    HighCVE-2021-24170

    User Profile Picture < 2.5.0 - Sensitive Information Disclosure

    7.5
    MediumCVE-2021-24473

    User Profile Picture < 2.6.0 - Arbitrary User Picture Change/Deletion via IDOR

    5.4
    LowCVE-2026-61971

    Cozmoslabs User Profile Picture: Authorization Bypass Through User-Controlled Key

    2.7
    MediumCVE-2024-5639

    Cozmoslabs User Profile Picture: Authorization Bypass Through User-Controlled Key

    4.3

    All products by Cozmoslabs