Description
An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file.
Remediation
References
https://github.com/payloadcms/payload
https://www.youtube.com/watch?v=6CfhAxA3xdQ
Related Vulnerabilities
CVE-2020-2282 Vulnerability in maven package org.jenkins-ci.plugins:implied-labels
CVE-2023-41034 Vulnerability in maven package org.eclipse.leshan:leshan-core
CVE-2020-7739 Vulnerability in npm package phantomjs-seo
CVE-2018-1324 Vulnerability in maven package org.apache.commons:commons-compress
CVE-2021-21616 Vulnerability in maven package org.biouno:uno-choice