5.3
Medium
CVE-2026-2979 A flaw has been found in FastApiAdmin up to 2.2.0
Description
A flaw has been found in FastApiAdmin up to 2.2.0. This issue affects the function user_avatar_upload_controller of the file /backend/app/api/v1/module_system/user/controller.py of the component Scheduled Task API. Executing a manipulation can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FastApiAdmin | 2.2.0 | No fix stated |
| FastApiAdmin | 2.1 | No fix stated |
| FastApiAdmin | 2.0 | No fix stated |
Other CVEs of FastApiAdmin
The 5 CVEs of FastApiAdmin →
CVE-2026-2978
A vulnerability was detected in FastApiAdmin up to 2.2.0
5.3
Medium
CVE-2026-2977
A security vulnerability has been detected in FastApiAdmin up to 2.2.0
5.3
Medium
CVE-2026-2976
A weakness has been identified in FastApiAdmin up to 2.2.0
5.3
Medium
CVE-2026-2975
A security flaw has been discovered in FastApiAdmin up to 2.2.0
6.9
Medium