Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Primary rating from Vendor (mitre) · only source for this CVE.
CVSS VectorVendor: mitre
Lifecycle Timeline
3DescriptionCVE.org
A markdown based cross-site scripting (XSS) vulnerability in the /system/notice/create endpoint of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the notice_content parameter.
AnalysisAI
Cross-site scripting via unsanitized markdown rendering in FastapiAdmin v2.2.0 allows unauthenticated remote attackers to inject arbitrary JavaScript or HTML through the notice_content parameter of the /system/notice/create endpoint. The Changed scope (S:C) in the CVSS vector confirms the injected script executes in a browser security context distinct from the vulnerable component itself, enabling session hijacking, credential theft, or defacement against any user who views the crafted notice. No confirmed active exploitation (CISA KEV) exists at time of analysis, though a researcher-published reference on GitHub likely documents a proof-of-concept payload.
Technical ContextAI
FastapiAdmin v2.2.0 is an administrative panel framework built on FastAPI (Python). The vulnerability resides in the /system/notice/create endpoint, which accepts a notice_content parameter rendered as markdown. The root cause (CWE-79: Improper Neutralization of Input During Web Page Generation) is the failure to sanitize or escape markdown-to-HTML output before reflecting it in the browser - common markdown libraries permit raw HTML passthrough or support link/image syntax that can embed JavaScript handlers (e.g., [text](javascript:...) or <script> blocks). The NVD CPE assignment is currently blank (cpe:2.3:a:n/a:n/a), meaning NVD has not yet formally catalogued the affected product in its dictionary, which limits automated vulnerability scanner coverage. The CVSS vector AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N classifies this as a network-reachable, low-complexity, no-privilege attack requiring victim interaction with Changed scope.
RemediationAI
No vendor-released patch has been identified at time of analysis. Operators should monitor the FastapiAdmin project repository for a remediated release and upgrade immediately upon availability. As compensating controls: restrict network access to the /system/notice/create endpoint to trusted administrative IP ranges or internal networks only - this directly addresses the AV:N attack vector and eliminates unauthenticated remote reach (trade-off: reduces administrative flexibility). If markdown rendering is not a required feature, disable it in the notice creation workflow and enforce plain-text input only, which eliminates the markdown injection surface entirely (trade-off: loss of notice formatting capability). Implement a Content Security Policy (CSP) header with script-src 'self' on the admin panel to limit the damage from any successful XSS injection (trade-off: may break legitimate inline scripts). Input validation and output encoding for the notice_content parameter should be applied at the application layer as a permanent fix. The researcher's disclosure at https://github.com/CC-T-454455/Vulnerabilities/tree/master/fastapi-admin/vulnerability-6 should be reviewed for specific payload patterns to build WAF rules against.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today