Description
The @payloadcms/storage-vercel-blob storage adapter for Payload contains an improper access control vulnerability that allows authenticated users to bypass collection-level permissions by accessing the client-upload route directly. Attackers can upload files through the client-upload endpoint without possessing the required collection access permissions, circumventing the intended access control enforcement.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
payloadcms payload
Default version status: unaffected
3.25.0 to < 3.90.0affected4.0.0-canary.0 to < 4.0.0-canary.34affected
pkg:github/payloadcms/payload