Beveiligingsadvies

CVE-2026-2979

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-23 08:02:07

Laatst bijgewerkt 2026-02-23 13:07:05

Toegewezen door VulDB

CVSS-score 6.5

Status PUBLISHED

Beschrijving

A flaw has been found in FastApiAdmin up to 2.2.0. This issue affects the function user_avatar_upload_controller of the file /backend/app/api/v1/module_system/user/controller.py of the component Scheduled Task API. Executing a manipulation can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used.

← Alle CVE's bekijken Bekijk op cve.org ↗