CVE-2026-2977 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security vulnerability has been detected in FastApiAdmin up to 2.2.0. This affects the function upload_controller of the file /backend/app/api/v1/module_commo…
Medium CVSS: 5.3

CVE-2026-2977

A security vulnerability has been detected in FastApiAdmin up to 2.2.0. This affects the function upload_controller of the file /backend/app/api/v1/module_common/file/controller.py of the component Scheduled Task API. Such manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Vendor
Fastapiadmin
Product
Fastapiadmin
CWE
CWE-284
Yayın Tarihi
2026-02-23 08:16:13
Güncelleme
2026-03-05 13:00:50
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-284 Fastapiadmin MEDIUM Fastapiadmin 2026

Referanslar

https://github.com/CC-T-454455/Vulnerabilities/tree/master/fastapi-admin/vulnerability-3 https://vuldb.com/?ctiid.347361 https://vuldb.com/?id.347361 https://vuldb.com/?submit.756144