CVE-2022-27952: Malicious File Upload
Published Apr 12, 2022
·Updated
An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file.
Affected Software
1 affected component
PayloadCMS Payload Node.js=0.15.0
Event History
Apr 12, 2022
CVE Published
via MITRE·04:29 PM
Data Sourced
via MITRE·04:29 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-27952?
CVE-2022-27952 has a high severity rating due to its potential for arbitrary code execution.
2
How do I fix CVE-2022-27952?
To fix CVE-2022-27952, upgrade PayloadCMS to version 0.15.1 or later to mitigate the vulnerability.
3
What type of vulnerability is CVE-2022-27952?
CVE-2022-27952 is classified as an arbitrary file upload vulnerability.
4
Which versions of PayloadCMS are affected by CVE-2022-27952?
CVE-2022-27952 affects PayloadCMS version 0.15.0.
5
What can attackers do with CVE-2022-27952?
Attackers can exploit CVE-2022-27952 to execute arbitrary code by uploading a crafted SVG file.