Weaknesses of type CWE-434

3,099 results

Upload sem restrição de arquivo com tipo perigoso

Ocorre quando uma aplicação aceita upload de arquivos sem validar adequadamente seu tipo, extensão ou conteúdo. Um atacante pode enviar executáveis, scripts ou outros arquivos maliciosos, que serão armazenados ou executados no servidor, comprometendo sua integridade e segurança.

Example

Um formulário de perfil aceita qualquer arquivo como 'foto do usuário' sem checar extensão ou MIME type. Um atacante envia um arquivo .exe ou .php renomeado como .jpg, que é salvo no diretório web e posteriormente executado quando acessado, permitindo execução de código remoto.

How to mitigate

Valide uploads checando MIME type real (não apenas extensão), restrinja tipos permitidos de forma explícita, armazene arquivos fora da raiz web, desabilite execução de scripts no diretório de upload e considere usar vírus scanner. Implemente whitelist rigorosa, nunca blacklist.

CVE-2024-51790CRITICALWordPress HB AUDIO GALLERY plugin <= 3.0 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-52476CRITICALWordPress Fediverse Embeds plugin <= 1.5.3 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2023-3796MEDIUMBug Finder Foody Friend Profile Picture profile unrestricted uploadEPSS 0.5%CVE-2026-67243HIGHfreo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrEPSS 0.5%CVE-2025-32140CRITICALWordPress WP Remote Thumbnail Plugin <= 1.3.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-31377CRITICALWordPress WP Photo Album Plus plugin <= 8.7.01.001 - Unauth. Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2020-37227HIGHWordPress Plugin HS Brand Logo Slider 2.1 Unrestricted File UploadEPSS 0.5%CVE-2024-49330CRITICALWordPress Nice Backgrounds plugin <= 1.0 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-7277MEDIUMitsourcecode Alton Management System Add a Menu menu.php unrestricted uploadEPSS 0.5%CVE-2023-4097HIGHMultiple vulnerabilities in IDM Sistemas QSigeEPSS 0.5%CVE-2025-65474HIGHAn arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arEPSS 0.5%CVE-2025-68909CRITICALWordPress Blogistic theme <= 1.0.5 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2025-68910CRITICALWordPress Blogzee theme <= 1.0.5 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2025-35055HIGHNewforma Info Exchange (NIX) insecure file uploadEPSS 0.5%CVE-2025-2978MEDIUMWCMS Article Publishing Page CKEditor unrestricted uploadEPSS 0.5%CVE-2025-39401CRITICALWordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2025-1862MEDIUMAuthenticated Arbitrary File Upload in Multiple WSO2 Products via BPEL Uploader SOAP Service Leading to Remote Code ExecutionEPSS 0.5%CVE-2026-38991HIGHCockpit 2.13.5 and earlier is affected by a misconfiguration within the Bucket component _isFileTypeAllowed function where a specially craftEPSS 0.5%CVE-2025-1593MEDIUMSourceCodester Best Employee Management System Profile Picture unrestricted uploadEPSS 0.5%CVE-2026-86666MEDIUMaircheng-org iWebShop-5 pic.php uploadFile unrestricted uploadEPSS 0.5%