Weaknesses of type CWE-434

3,101 results

Upload sem restrição de arquivo com tipo perigoso

Ocorre quando uma aplicação aceita upload de arquivos sem validar adequadamente seu tipo, extensão ou conteúdo. Um atacante pode enviar executáveis, scripts ou outros arquivos maliciosos, que serão armazenados ou executados no servidor, comprometendo sua integridade e segurança.

Example

Um formulário de perfil aceita qualquer arquivo como 'foto do usuário' sem checar extensão ou MIME type. Um atacante envia um arquivo .exe ou .php renomeado como .jpg, que é salvo no diretório web e posteriormente executado quando acessado, permitindo execução de código remoto.

How to mitigate

Valide uploads checando MIME type real (não apenas extensão), restrinja tipos permitidos de forma explícita, armazene arquivos fora da raiz web, desabilite execução de scripts no diretório de upload e considere usar vírus scanner. Implemente whitelist rigorosa, nunca blacklist.

CVE-2023-7054MEDIUMPHPGurukul Online Notes Sharing System add-notes.php unrestricted uploadEPSS 0.5%CVE-2025-9212HIGHWP Dispatcher <= 1.2.0 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.5%CVE-2024-49326CRITICALWordPress Affiliator plugin <= 2.1.3 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-52372CRITICALWordPress Easy CSV Importer plugin <= 7.0.0 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-50531CRITICALWordPress RSVPMaker for Toastmasters plugin <= 6.2.4 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-49327CRITICALWordPress Woostagram Connect plugin <= 1.0.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-50523CRITICALWordPress All Post Contact Form plugin <= 1.8.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-50525CRITICALWordPress Helloprint plugin <= 2.0.4 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-52379CRITICALWordPress kineticPay for WooCommerce plugin <= 2.0.8 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-49324CRITICALWordPress Sovratec Case Management plugin <= 1.0.0 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-52376CRITICALWordPress Boat Rental Plugin for WordPress plugin <= 1.0.1 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-49314CRITICALWordPress JiangQie Free Mini Program plugin <= 2.5.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-52373CRITICALWordPress Devexhub Gallery plugin <= 2.0.1 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-49257CRITICALWordPress Azz Anonim Posting plugin <= 0.9 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-50495CRITICALWordPress Plugin Propagator plugin <= 0.1 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-49216CRITICALWordPress Feed Comments Number plugin <= 0.2.1 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-50527CRITICALWordPress Stacks Mobile App Builder plugin <= 5.2.3 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-49291CRITICALWordPress Cooked Pro plugin < 1.8.0 - Unauthenticated Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-52377CRITICALWordPress Instant Image Generator (One Click Image Uploads from Pixabay, Pexels and OpenAI) plugin <= 1.5.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-49242CRITICALWordPress Digital Lottery plugin <= 3.0.5 - Arbitrary File Upload vulnerabilityEPSS 0.5%