Lucene search
China National Vulnerability DatabaseCNVD-2022-55152HistoryApr 15, 2022 - 12:00 a.m.
PayloadCMS arbitrary file upload vulnerability
2022-04-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
payloadcms
arbitrary file upload
vulnerability
typescript
node.js
react
mongodb
attackers
crafted svg files
execute arbitrary code
EPSS
0.004
Percentile
72.4%
PayloadCMS is a Headless CMS and application framework built using TypeScript, Node.js, React and MongoDB.PayloadCMS is vulnerable to arbitrary file uploads, which can be exploited by attackers to execute arbitrary code via crafted SVG files.
Related
nvd
nvd
CVE-2022-27952
2022-04-12 17:15:10
osv
osv
CVE-2022-27952
2022-04-12 17:15:10
Unrestricted Upload of File with Dangerous Type in Payload
2022-04-13 00:00:22
cvelist
cvelist
CVE-2022-27952
2022-04-12 16:29:04
github
github
Unrestricted Upload of File with Dangerous Type in Payload
2022-04-13 00:00:22
cve
cve
CVE-2022-27952
2022-04-12 17:15:10
prion
prion
Design/Logic Flaw
2022-04-12 17:15:00