5.3
Moyenne
CVE-2026-2978 A vulnerability was detected in FastApiAdmin up to 2.2.0
Description
A vulnerability was detected in FastApiAdmin up to 2.2.0. This vulnerability affects the function upload_file_controller of the file /backend/app/api/v1/module_system/params/controller.py of the component Scheduled Task API. Performing a manipulation results in unrestricted upload. The attack can be initiated remotely. The exploit is now public and may be used.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FastApiAdmin | 2.2.0 | Pas de correctif indiqué |
| FastApiAdmin | 2.1 | Pas de correctif indiqué |
| FastApiAdmin | 2.0 | Pas de correctif indiqué |
Autres CVE de FastApiAdmin
Les 5 CVE de FastApiAdmin →
CVE-2026-2979
A flaw has been found in FastApiAdmin up to 2.2.0
5.3
Moyenne
CVE-2026-2977
A security vulnerability has been detected in FastApiAdmin up to 2.2.0
5.3
Moyenne
CVE-2026-2976
A weakness has been identified in FastApiAdmin up to 2.2.0
5.3
Moyenne
CVE-2026-2975
A security flaw has been discovered in FastApiAdmin up to 2.2.0
6.9
Moyenne