← Voltar à pesquisa de CVEs

CVE-2026-36724

FastapiAdmin

Descrição

An uncaught exception in the /application/job/update/{id} endpoint of FastapiAdmin v2.2.0 allows authenticated attackers with the module_task:job:update permission to cause a Denial of Service (DoS) via manipulating the func field of scheduled tasks.

CVSS 6.5EPSS 0.28900000000000003%Risco 0.67
Ver fonte
Publicação
2026-06-09 19:17:42
Versões afetadas
==2.2.0
Tipo
Core software
Última alteração
2026-07-23 09:10:00
Vetor
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H