Vulnerabilities > CVE-2023-30843 - Unspecified vulnerability in Payloadcms Payload

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

payloadcms

NVD

Published: 2023-04-26

Updated: 2024-11-21

Summary

Payload is a free and open source headless content management system. In versions prior to 1.7.0, if a user has access to documents that contain hidden fields or fields they do not have access to, the user could reverse-engineer those values via brute force. Version 1.7.0 contains a patch. As a workaround, write a `beforeOperation` hook to remove `where` queries that attempt to access hidden field data.

Vulnerable Configurations

Part	Description	Count
Application	Payloadcms Payloadcms Payload 0.0.2 Payloadcms Payload 0.0.3 Payloadcms Payload 0.0.4 Payloadcms Payload 0.0.5 Payloadcms Payload 0.0.6 Payloadcms Payload 0.0.7 Payloadcms Payload 0.0.8 Payloadcms Payload 0.0.9 Payloadcms Payload 0.0.10 Payloadcms Payload 0.0.11 Payloadcms Payload 0.0.12 Payloadcms Payload 0.0.13 Payloadcms Payload 0.0.14 Payloadcms Payload 0.0.15 Payloadcms Payload 0.0.16 Payloadcms Payload 0.0.17 Payloadcms Payload 0.0.18 Payloadcms Payload 0.0.19 Payloadcms Payload 0.0.20 Payloadcms Payload 0.0.21 Payloadcms Payload 0.0.22 Payloadcms Payload 0.0.23 Payloadcms Payload 0.0.24 Payloadcms Payload 0.0.25 Payloadcms Payload 0.0.26 Payloadcms Payload 0.0.27 Payloadcms Payload 0.0.28 Payloadcms Payload 0.0.29 Payloadcms Payload 0.0.30 Payloadcms Payload 0.0.31 Payloadcms Payload 0.0.32 Payloadcms Payload 0.0.33 Payloadcms Payload 0.0.34 Payloadcms Payload 0.0.35 Payloadcms Payload 0.0.36 Payloadcms Payload 0.0.37 Payloadcms Payload 0.0.38 Payloadcms Payload 0.0.39 Payloadcms Payload 0.0.40 Payloadcms Payload 0.0.41 Payloadcms Payload 0.0.42 Payloadcms Payload 0.0.43 Payloadcms Payload 0.0.44 Payloadcms Payload 0.0.45 Payloadcms Payload 0.0.46 Payloadcms Payload 0.0.47 Payloadcms Payload 0.0.48 Payloadcms Payload 0.0.49 Payloadcms Payload 0.0.50 Payloadcms Payload 0.0.51 Payloadcms Payload 0.0.52 Payloadcms Payload 0.0.53 Payloadcms Payload 0.0.54 Payloadcms Payload 0.0.55 Payloadcms Payload 0.0.56 Payloadcms Payload 0.0.57 Payloadcms Payload 0.0.58 Payloadcms Payload 0.0.59 Payloadcms Payload 0.0.60 Payloadcms Payload 0.0.61 Payloadcms Payload 0.0.62 Payloadcms Payload 0.0.63 Payloadcms Payload 0.0.64 Payloadcms Payload 0.0.65 Payloadcms Payload 0.0.66 Payloadcms Payload 0.0.67 Payloadcms Payload 0.0.68 Payloadcms Payload 0.0.69 Payloadcms Payload 0.0.70 Payloadcms Payload 0.0.71 Payloadcms Payload 0.0.72 Payloadcms Payload 0.0.73 Payloadcms Payload 0.0.74 Payloadcms Payload 0.0.75 Payloadcms Payload 0.0.76 Payloadcms Payload 0.0.77 Payloadcms Payload 0.0.78 Payloadcms Payload 0.0.79 Payloadcms Payload 0.0.80 Payloadcms Payload 0.0.81 Payloadcms Payload 0.0.82 Payloadcms Payload 0.0.83 Payloadcms Payload 0.0.84 Payloadcms Payload 0.0.85 Payloadcms Payload 0.0.86 Payloadcms Payload 0.0.87 Payloadcms Payload 0.0.88 Payloadcms Payload 0.0.89 Payloadcms Payload 0.0.90 Payloadcms Payload 0.0.91 Payloadcms Payload 0.0.92 Payloadcms Payload 0.0.93 Payloadcms Payload 0.0.94 Payloadcms Payload 0.0.95 Payloadcms Payload 0.0.96 Payloadcms Payload 0.0.97 Payloadcms Payload 0.0.98 Payloadcms Payload 0.0.99 Payloadcms Payload 0.0.101 Payloadcms Payload 0.0.102 Payloadcms Payload 0.0.103 Payloadcms Payload 0.0.104 Payloadcms Payload 0.0.105 Payloadcms Payload 0.0.106 Payloadcms Payload 0.0.107 Payloadcms Payload 0.0.108 Payloadcms Payload 0.0.109 Payloadcms Payload 0.0.110 Payloadcms Payload 0.0.111 Payloadcms Payload 0.0.112 Payloadcms Payload 0.0.113 Payloadcms Payload 0.0.114 Payloadcms Payload 0.0.115 Payloadcms Payload 0.0.116 Payloadcms Payload 0.0.117 Payloadcms Payload 0.0.118 Payloadcms Payload 0.0.119 Payloadcms Payload 0.0.120 Payloadcms Payload 0.0.121 Payloadcms Payload 0.0.122 Payloadcms Payload 0.0.123 Payloadcms Payload 0.0.124 Payloadcms Payload 0.0.125 Payloadcms Payload 0.0.126 Payloadcms Payload 0.0.127 Payloadcms Payload 0.0.128 Payloadcms Payload 0.0.129 Payloadcms Payload 0.0.130 Payloadcms Payload 0.0.131 Payloadcms Payload 0.0.132 Payloadcms Payload 0.0.133 Payloadcms Payload 0.0.134 Payloadcms Payload 0.0.135 Payloadcms Payload 0.0.136 Payloadcms Payload 0.0.137 Payloadcms Payload 0.0.138 Payloadcms Payload 0.0.139 Payloadcms Payload 0.0.140 Payloadcms Payload 0.0.141 Payloadcms Payload 0.1.0 Payloadcms Payload 0.1.1 Payloadcms Payload 0.1.2 Payloadcms Payload 0.1.3 Payloadcms Payload 0.1.4 Payloadcms Payload 0.1.5 Payloadcms Payload 0.1.6 Payloadcms Payload 0.1.7 Payloadcms Payload 0.1.8 Payloadcms Payload 0.1.9 Payloadcms Payload 0.1.10 Payloadcms Payload 0.1.11 Payloadcms Payload 0.1.12 Payloadcms Payload 0.1.13 Payloadcms Payload 0.1.14 Payloadcms Payload 0.1.15 Payloadcms Payload 0.1.16 Payloadcms Payload 0.1.17 Payloadcms Payload 0.1.18 Payloadcms Payload 0.1.19 Payloadcms Payload 0.1.20 Payloadcms Payload 0.1.121 Payloadcms Payload 0.1.122 Payloadcms Payload 0.1.123 Payloadcms Payload 0.1.124 Payloadcms Payload 0.1.125 Payloadcms Payload 0.1.126 Payloadcms Payload 0.1.127 Payloadcms Payload 0.1.128 Payloadcms Payload 0.1.129 Payloadcms Payload 0.1.130 Payloadcms Payload 0.1.131 Payloadcms Payload 0.1.132 Payloadcms Payload 0.1.133 Payloadcms Payload 0.1.134 Payloadcms Payload 0.1.135 Payloadcms Payload 0.1.136 Payloadcms Payload 0.1.137 Payloadcms Payload 0.1.138 Payloadcms Payload 0.1.139 Payloadcms Payload 0.1.140 Payloadcms Payload 0.1.141 Payloadcms Payload 0.1.142 Payloadcms Payload 0.1.143 Payloadcms Payload 0.1.144 Payloadcms Payload 0.1.145 Payloadcms Payload 0.1.146 Payloadcms Payload 0.2.0 Payloadcms Payload 0.2.1 Payloadcms Payload 0.2.2 Payloadcms Payload 0.2.3 Payloadcms Payload 0.2.4 Payloadcms Payload 0.2.5 Payloadcms Payload 0.2.6 Payloadcms Payload 0.2.8 Payloadcms Payload 0.2.9 Payloadcms Payload 0.2.10 Payloadcms Payload 0.2.11 Payloadcms Payload 0.2.12 Payloadcms Payload 0.2.13 Payloadcms Payload 0.3.0 Payloadcms Payload 0.4.0 Payloadcms Payload 0.4.1 Payloadcms Payload 0.4.2 Payloadcms Payload 0.4.3 Payloadcms Payload 0.4.4 Payloadcms Payload 0.4.5 Payloadcms Payload 0.4.6 Payloadcms Payload 0.4.7 Payloadcms Payload 0.5.0 Payloadcms Payload 0.5.1 Payloadcms Payload 0.5.2 Payloadcms Payload 0.5.3 Payloadcms Payload 0.5.4 Payloadcms Payload 0.5.5 Payloadcms Payload 0.5.6 Payloadcms Payload 0.5.7 Payloadcms Payload 0.5.8 Payloadcms Payload 0.5.9 Payloadcms Payload 0.5.10 Payloadcms Payload 0.6.0 Payloadcms Payload 0.6.1 Payloadcms Payload 0.6.2 Payloadcms Payload 0.6.3 Payloadcms Payload 0.6.4 Payloadcms Payload 0.6.5 Payloadcms Payload 0.6.6 Payloadcms Payload 0.6.7 Payloadcms Payload 0.6.8 Payloadcms Payload 0.6.9 Payloadcms Payload 0.6.10 Payloadcms Payload 0.7.0 Payloadcms Payload 0.7.1 Payloadcms Payload 0.7.2 Payloadcms Payload 0.7.3 Payloadcms Payload 0.7.4 Payloadcms Payload 0.7.5 Payloadcms Payload 0.7.6 Payloadcms Payload 0.7.7 Payloadcms Payload 0.7.8 Payloadcms Payload 0.7.9 Payloadcms Payload 0.7.10 Payloadcms Payload 0.8.0 Payloadcms Payload 0.8.1 Payloadcms Payload 0.8.2 Payloadcms Payload 0.9.0 Payloadcms Payload 0.9.1 Payloadcms Payload 0.9.2 Payloadcms Payload 0.9.3 Payloadcms Payload 0.9.4 Payloadcms Payload 0.9.5 Payloadcms Payload 0.10.0 Payloadcms Payload 0.10.1 Payloadcms Payload 0.10.2 Payloadcms Payload 0.10.3 Payloadcms Payload 0.10.4 Payloadcms Payload 0.10.5 Payloadcms Payload 0.10.6 Payloadcms Payload 0.10.7 Payloadcms Payload 0.10.8 Payloadcms Payload 0.10.9 Payloadcms Payload 0.10.10 Payloadcms Payload 0.10.11 Payloadcms Payload 0.10.12 Payloadcms Payload 0.10.13 Payloadcms Payload 0.10.14 Payloadcms Payload 0.10.16 Payloadcms Payload 0.10.17 Payloadcms Payload 0.10.18 Payloadcms Payload 0.11.0 Payloadcms Payload 0.11.1 Payloadcms Payload 0.12.0 Payloadcms Payload 0.12.1 Payloadcms Payload 0.12.2 Payloadcms Payload 0.12.3 Payloadcms Payload 0.12.4 Payloadcms Payload 0.12.5 Payloadcms Payload 0.12.6 Payloadcms Payload 0.12.7 Payloadcms Payload 0.12.8 Payloadcms Payload 0.12.9 Payloadcms Payload 0.12.10 Payloadcms Payload 0.12.11 Payloadcms Payload 0.12.12 Payloadcms Payload 0.12.13 Payloadcms Payload 0.13.0 Payloadcms Payload 0.13.1 Payloadcms Payload 0.13.2 Payloadcms Payload 0.13.3 Payloadcms Payload 0.13.4 Payloadcms Payload 0.13.5 Payloadcms Payload 0.13.6 Payloadcms Payload 0.13.7 Payloadcms Payload 0.13.8 Payloadcms Payload 0.13.9 Payloadcms Payload 0.13.10 Payloadcms Payload 0.13.11 Payloadcms Payload 0.13.12 Payloadcms Payload 0.13.13 Payloadcms Payload 0.13.14 Payloadcms Payload 0.13.16 Payloadcms Payload 0.13.19 Payloadcms Payload 0.13.20 Payloadcms Payload 0.13.21 Payloadcms Payload 0.14.0 Payloadcms Payload 0.14.1 Payloadcms Payload 0.14.2 Payloadcms Payload 0.14.3 Payloadcms Payload 0.14.5 Payloadcms Payload 0.14.6 Payloadcms Payload 0.14.7 Payloadcms Payload 0.14.8 Payloadcms Payload 0.14.9 Payloadcms Payload 0.14.10 Payloadcms Payload 0.14.11 Payloadcms Payload 0.14.12 Payloadcms Payload 0.14.14 Payloadcms Payload 0.14.15 Payloadcms Payload 0.14.16 Payloadcms Payload 0.14.17 Payloadcms Payload 0.14.18 Payloadcms Payload 0.14.19 Payloadcms Payload 0.14.20 Payloadcms Payload 0.14.21 Payloadcms Payload 0.14.22 Payloadcms Payload 0.14.23 Payloadcms Payload 0.14.24 Payloadcms Payload 0.14.25 Payloadcms Payload 0.14.26 Payloadcms Payload 0.14.27 Payloadcms Payload 0.14.28 Payloadcms Payload 0.14.29 Payloadcms Payload 0.14.30 Payloadcms Payload 0.14.31 Payloadcms Payload 0.15.0 Payloadcms Payload 0.15.1 Payloadcms Payload 0.15.2 Payloadcms Payload 0.15.3 Payloadcms Payload 0.15.4 Payloadcms Payload 0.15.5 Payloadcms Payload 0.15.6 Payloadcms Payload 0.15.7 Payloadcms Payload 0.15.8 Payloadcms Payload 0.15.9 Payloadcms Payload 0.15.10 Payloadcms Payload 0.15.11 Payloadcms Payload 0.15.12 Payloadcms Payload 0.15.13 Payloadcms Payload 0.16.0 Payloadcms Payload 0.16.1 Payloadcms Payload 0.16.2 Payloadcms Payload 0.16.3 Payloadcms Payload 0.16.4 Payloadcms Payload 0.17.0 Payloadcms Payload 0.17.1 Payloadcms Payload 0.17.2 Payloadcms Payload 0.17.3 Payloadcms Payload 0.18.0 Payloadcms Payload 0.18.1 Payloadcms Payload 0.18.2 Payloadcms Payload 0.18.3 Payloadcms Payload 0.18.4 Payloadcms Payload 0.18.5 Payloadcms Payload 0.19.0 Payloadcms Payload 0.19.1 Payloadcms Payload 0.19.2 Payloadcms Payload 0.20.1 Payloadcms Payload 1.0.4 Payloadcms Payload 1.0.5 Payloadcms Payload 1.0.6 Payloadcms Payload 1.0.7 Payloadcms Payload 1.0.8 Payloadcms Payload 1.0.9 Payloadcms Payload 1.0.10 Payloadcms Payload 1.0.11 Payloadcms Payload 1.0.12 Payloadcms Payload 1.0.13 Payloadcms Payload 1.0.14 Payloadcms Payload 1.0.15 Payloadcms Payload 1.0.16 Payloadcms Payload 1.0.17 Payloadcms Payload 1.0.18 Payloadcms Payload 1.0.19 Payloadcms Payload 1.0.20 Payloadcms Payload 1.0.21 Payloadcms Payload 1.0.22 Payloadcms Payload 1.0.23 Payloadcms Payload 1.0.24 Payloadcms Payload 1.0.25 Payloadcms Payload 1.0.26 Payloadcms Payload 1.0.27 Payloadcms Payload 1.0.28 Payloadcms Payload 1.0.29 Payloadcms Payload 1.0.30 Payloadcms Payload 1.0.31 Payloadcms Payload 1.0.33 Payloadcms Payload 1.0.34 Payloadcms Payload 1.0.35 Payloadcms Payload 1.0.36 Payloadcms Payload 1.1.0 Payloadcms Payload 1.1.1 Payloadcms Payload 1.1.2 Payloadcms Payload 1.1.3 Payloadcms Payload 1.1.4 Payloadcms Payload 1.1.5 Payloadcms Payload 1.1.6 Payloadcms Payload 1.1.7 Payloadcms Payload 1.1.8 Payloadcms Payload 1.1.9 Payloadcms Payload 1.1.10 Payloadcms Payload 1.1.11 Payloadcms Payload 1.1.12 Payloadcms Payload 1.1.13 Payloadcms Payload 1.1.14 Payloadcms Payload 1.1.15 Payloadcms Payload 1.1.16 Payloadcms Payload 1.1.17 Payloadcms Payload 1.1.18 Payloadcms Payload 1.1.19 Payloadcms Payload 1.1.20 Payloadcms Payload 1.1.21 Payloadcms Payload 1.1.22 Payloadcms Payload 1.1.23 Payloadcms Payload 1.1.24 Payloadcms Payload 1.1.25 Payloadcms Payload 1.1.26 Payloadcms Payload 1.2.0 Payloadcms Payload 1.2.1 Payloadcms Payload 1.2.2 Payloadcms Payload 1.2.3 Payloadcms Payload 1.2.4 Payloadcms Payload 1.2.5 Payloadcms Payload 1.3.0 Payloadcms Payload 1.3.1 Payloadcms Payload 1.3.2 Payloadcms Payload 1.3.3 Payloadcms Payload 1.3.4 Payloadcms Payload 1.4.0 Payloadcms Payload 1.4.1 Payloadcms Payload 1.4.2 Payloadcms Payload 1.5.0 Payloadcms Payload 1.5.1 Payloadcms Payload 1.5.2 Payloadcms Payload 1.5.3 Payloadcms Payload 1.5.4 Payloadcms Payload 1.5.5 Payloadcms Payload 1.5.6 Payloadcms Payload 1.5.7 Payloadcms Payload 1.5.8 Payloadcms Payload 1.5.9 Payloadcms Payload 1.6.0 Payloadcms Payload 1.6.1 Payloadcms Payload 1.6.2 Payloadcms Payload 1.6.3 Payloadcms Payload 1.6.4 Payloadcms Payload 1.6.5 Payloadcms Payload 1.6.6 Payloadcms Payload 1.6.7 Payloadcms Payload 1.6.8 Payloadcms Payload 1.6.9 Payloadcms Payload 1.6.10 Payloadcms Payload 1.6.11 Payloadcms Payload 1.6.12 Payloadcms Payload 1.6.13 Payloadcms Payload 1.6.14 Payloadcms Payload 1.6.15 Payloadcms Payload 1.6.16 Payloadcms Payload 1.6.17 Payloadcms Payload 1.6.18 Payloadcms Payload 1.6.19 Payloadcms Payload 1.6.20 Payloadcms Payload 1.6.21 Payloadcms Payload 1.6.22 Payloadcms Payload 1.6.23 Payloadcms Payload 1.6.24 Payloadcms Payload 1.6.25 Payloadcms Payload 1.6.26 Payloadcms Payload 1.6.27 Payloadcms Payload 1.6.28 Payloadcms Payload 1.6.29 Payloadcms Payload 1.6.30 Payloadcms Payload 1.6.31 Payloadcms Payload 1.6.32	483

Summary

Vulnerable Configurations

References