Vulnerabilities

FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser.

FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-login endpoints.

A flaw has been found in FastApiAdmin up to 2.2.0.

A vulnerability was detected in FastApiAdmin up to 2.2.0.

A security vulnerability has been detected in FastApiAdmin up to 2.2.0.

A weakness has been identified in FastApiAdmin up to 2.2.0.

A security flaw has been discovered in FastApiAdmin up to 2.2.0.