Fastapiadmin

Fastapiadmin

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2026-36724

  • EPSS 0.29%
  • Veröffentlicht 09.06.2026 00:00:00
  • Zuletzt bearbeitet 10.06.2026 20:15:58

An uncaught exception in the /application/job/update/{id} endpoint of FastapiAdmin v2.2.0 allows authenticated attackers with the module_task:job:update permission to cause a Denial of Service (DoS) via manipulating the func field of scheduled tasks.

6.1

CVE-2026-36725

  • EPSS 0.18%
  • Veröffentlicht 09.06.2026 00:00:00
  • Zuletzt bearbeitet 10.06.2026 20:15:58

A markdown based cross-site scripting (XSS) vulnerability in the /system/notice/create endpoint of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the notice_content parameter.

5.4

CVE-2026-36728

  • EPSS 0.16%
  • Veröffentlicht 09.06.2026 00:00:00
  • Zuletzt bearbeitet 10.06.2026 20:15:58

A markdown based cross-site scripting (XSS) vulnerability in the AI assistant chat function of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a chat message.

8.8

CVE-2026-2979

Exploit
  • EPSS 0.29%
  • Veröffentlicht 23.02.2026 08:02:07
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A flaw has been found in FastApiAdmin up to 2.2.0. This issue affects the function user_avatar_upload_controller of the file /backend/app/api/v1/module_system/user/controller.py of the component Scheduled Task API. Executing a manipulation can lead t...

8.8

CVE-2026-2978

Exploit
  • EPSS 0.35%
  • Veröffentlicht 23.02.2026 07:32:07
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was detected in FastApiAdmin up to 2.2.0. This vulnerability affects the function upload_file_controller of the file /backend/app/api/v1/module_system/params/controller.py of the component Scheduled Task API. Performing a manipulation...

8.8

CVE-2026-2977

Exploit
  • EPSS 0.29%
  • Veröffentlicht 23.02.2026 07:02:06
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A security vulnerability has been detected in FastApiAdmin up to 2.2.0. This affects the function upload_controller of the file /backend/app/api/v1/module_common/file/controller.py of the component Scheduled Task API. Such manipulation leads to unres...

6.5

CVE-2026-2976

Exploit
  • EPSS 0.31%
  • Veröffentlicht 23.02.2026 06:32:07
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A weakness has been identified in FastApiAdmin up to 2.2.0. Affected by this issue is the function download_controller of the file /backend/app/api/v1/module_common/file/controller.py of the component Download Endpoint. This manipulation of the argum...

5.3

CVE-2026-2975

Exploit
  • EPSS 0.41%
  • Veröffentlicht 23.02.2026 06:02:07
  • Zuletzt bearbeitet 05.03.2026 13:00:58

A security flaw has been discovered in FastApiAdmin up to 2.2.0. Affected by this vulnerability is the function reset_api_docs of the file /backend/app/plugin/init_app.py of the component Custom Documentation Endpoint. The manipulation results in inf...