Lucene search

K
osvGoogleOSV:GHSA-W8XH-93QH-35VW
HistoryApr 13, 2022 - 12:00 a.m.

Unrestricted Upload of File with Dangerous Type in Payload

2022-04-1300:00:22
Google
osv.dev
13
arbitrary code execution
file upload vulnerability
svg file
payloadcms v0.15.0

EPSS

0.004

Percentile

72.4%

An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file.

EPSS

0.004

Percentile

72.4%

Related for OSV:GHSA-W8XH-93QH-35VW