Description

Payload has Authenticated SSRF via Upload Functionality

Impact

An authenticated Server-Side Request Forgery (SSRF) vulnerability existed in the upload functionality.

Authenticated users with create or update access to an upload-enabled collection could cause the server to make outbound HTTP requests to arbitrary URLs.

Consumers are affected if ALL of these are true:

Payload version < v3.79.1

At least one collection with upload enabled

An authenticated user has create or update access to that collection

Patches

This vulnerability has been patched in v3.79.1. Users should upgrade to v3.79.1 or later.

Workarounds

Until consumers can upgrade:

Restrict create and update access to upload-enabled collections to trusted roles only.

Limit outbound network access from your Payload server where possible.

Mitigation

Aliases

References