5.3
Moyenne
CVE-2026-2979 A flaw has been found in FastApiAdmin up to 2.2.0
Description
A flaw has been found in FastApiAdmin up to 2.2.0. This issue affects the function user_avatar_upload_controller of the file /backend/app/api/v1/module_system/user/controller.py of the component Scheduled Task API. Executing a manipulation can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FastApiAdmin | 2.2.0 | Pas de correctif indiqué |
| FastApiAdmin | 2.1 | Pas de correctif indiqué |
| FastApiAdmin | 2.0 | Pas de correctif indiqué |
Autres CVE de FastApiAdmin
Les 5 CVE de FastApiAdmin →
CVE-2026-2978
A vulnerability was detected in FastApiAdmin up to 2.2.0
5.3
Moyenne
CVE-2026-2977
A security vulnerability has been detected in FastApiAdmin up to 2.2.0
5.3
Moyenne
CVE-2026-2976
A weakness has been identified in FastApiAdmin up to 2.2.0
5.3
Moyenne
CVE-2026-2975
A security flaw has been discovered in FastApiAdmin up to 2.2.0
6.9
Moyenne