p PatchFirst

CVE-2022-27952

CVE-2022-27952

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file.

CVSS 9.8 · Critical · EPSS 2.3% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • payload npm

    Affected ranges
    • SEMVER: < 0.15.1

    Update to 0.15.1

Original sources

Check your server →