Advisories · Technology
FastapiAdmin.
Every CVE that names FastapiAdmin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
FastapiAdmin through 3.0 Hard-Coded JWT Secret Privilege Escalation
- FastapiAdmin
- Hard-coded credentials
- CVSS 9.3 CriticalCritical · CVSS 9+
FastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpoints
- FastapiAdmin
- Authentication bypass
- CVSS 5.3 Medium
FastApiAdmin Scheduled Task API controller.py user_avatar_upload_controller unrestricted upload
- FastApiAdmin
- Broken access control
- Unrestricted file upload
- CVSS 5.3 Medium
FastApiAdmin Scheduled Task API controller.py upload_file_controller unrestricted upload
- FastApiAdmin
- Broken access control
- Unrestricted file upload
- CVSS 5.3 Medium
FastApiAdmin Scheduled Task API controller.py upload_controller unrestricted upload
- FastApiAdmin
- Broken access control
- Unrestricted file upload
- CVSS 5.3 Medium
FastApiAdmin Download Endpoint controller.py download_controller information disclosure
- FastApiAdmin
- Information disclosure
- Broken access control
- CVSS 6.9 Medium
FastApiAdmin Custom Documentation Endpoint init_app.py reset_api_docs information disclosure
- FastApiAdmin
- Information disclosure
- Broken access control