5.3
Medium
CVE-2026-2978 A vulnerability was detected in FastApiAdmin up to 2.2.0
Description
A vulnerability was detected in FastApiAdmin up to 2.2.0. This vulnerability affects the function upload_file_controller of the file /backend/app/api/v1/module_system/params/controller.py of the component Scheduled Task API. Performing a manipulation results in unrestricted upload. The attack can be initiated remotely. The exploit is now public and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FastApiAdmin | 2.2.0 | No fix stated |
| FastApiAdmin | 2.1 | No fix stated |
| FastApiAdmin | 2.0 | No fix stated |
Other CVEs of FastApiAdmin
The 5 CVEs of FastApiAdmin →
CVE-2026-2979
A flaw has been found in FastApiAdmin up to 2.2.0
5.3
Medium
CVE-2026-2977
A security vulnerability has been detected in FastApiAdmin up to 2.2.0
5.3
Medium
CVE-2026-2976
A weakness has been identified in FastApiAdmin up to 2.2.0
5.3
Medium
CVE-2026-2975
A security flaw has been discovered in FastApiAdmin up to 2.2.0
6.9
Medium