Skip to content
Threat Feed
Subscribe

Product

@Payloadcms/Storage-S3 (>= 4.0.0-Canary.0, < 4.0.0-Canary.34)

1 brief RSS
high advisory

Payload Storage-S3 Object Overwrite Vulnerability

An authenticated user can exploit a path configuration weakness in @payloadcms/storage-s3 to overwrite arbitrary S3 objects across collections, bypassing security controls.

@payloadcms/storage-s3 +1 vulnerability web-application cloud
1t 1c