CVE-2022-27952: Unrestricted Upload of File with Dangerous Type in PayloadCMS
Summary
CVE-2022-27952: Unrestricted Upload of File with Dangerous Type in Payload. Affects payload versions < 0.15.1. Fixed in 0.15.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PayloadCMS is an npm package that provides a content management system (CMS) for managing website content. It allows users to upload files, including images and documents, to be used within the CMS. However, a vulnerability has been discovered in version 0.15.0 of PayloadCMS that allows attackers to upload and execute arbitrary code through a crafted SVG file.
Vulnerability Detail
The vulnerability in PayloadCMS v0.15.0 arises from an unrestricted file upload module. Attackers can exploit this vulnerability by uploading a specially crafted SVG file that contains malicious code. When the file is processed by the CMS, the malicious code is executed, potentially leading to remote code execution. This can result in unauthorized access to the system, data breaches, and other malicious activities.
How To Fix
Latest published version: 3.92.0 as of 23 Oct 2026
npm install payload@3.92.0Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.15.1
This is the first release that contains the fix.
npm install payload@0.15.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The vulnerability in PayloadCMS v0.15.0 allows attackers to execute arbitrary code through a crafted SVG file. To mitigate this risk, users should upgrade to version 0.15.1 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for payload →
FAQ
PayloadCMS is an npm package that provides a content management system for managing website content.
This vulnerability allows attackers to execute arbitrary code on systems running PayloadCMS v0.15.0, potentially leading to unauthorized access and data breaches.
You can use the Vulert Playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply upload your package-lock.json file and the playground will alert you if the vulnerability is present.
Currently, there is no known workaround for this vulnerability. It is recommended to upgrade to the latest version of PayloadCMS to mitigate the risk.
For further support on vulnerability remediation, you can contact info@devnack.com.
Related vulnerabilities
Recent vulnerabilities recorded for payload.
