Weaknesses of type CWE-434

3,101 results

Upload sem restrição de arquivo com tipo perigoso

Ocorre quando uma aplicação aceita upload de arquivos sem validar adequadamente seu tipo, extensão ou conteúdo. Um atacante pode enviar executáveis, scripts ou outros arquivos maliciosos, que serão armazenados ou executados no servidor, comprometendo sua integridade e segurança.

Example

Um formulário de perfil aceita qualquer arquivo como 'foto do usuário' sem checar extensão ou MIME type. Um atacante envia um arquivo .exe ou .php renomeado como .jpg, que é salvo no diretório web e posteriormente executado quando acessado, permitindo execução de código remoto.

How to mitigate

Valide uploads checando MIME type real (não apenas extensão), restrinja tipos permitidos de forma explícita, armazene arquivos fora da raiz web, desabilite execução de scripts no diretório de upload e considere usar vírus scanner. Implemente whitelist rigorosa, nunca blacklist.

CVE-2024-25623HIGHLack of media type verification of Activity Streams objects allows impersonation of remote accountsEPSS 0.5%CVE-2024-52374CRITICALWordPress Do That Task plugin <= 1.5.5 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-35746CRITICALWordPress BuddyPress Cover plugin <= 2.1.4.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-49329CRITICALWordPress WP REST API FNS plugin <= 1.0.0 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-50496CRITICALWordPress AR For WordPress plugin <= 6.6 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-49610CRITICALWordPress photokit plugin <= 1.0 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-50494CRITICALWordPress Sudan Payment Gateway for WooCommerce plugin <= 1.2.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-50420CRITICALWordPress aDirectory plugin <= 1.3 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-50484CRITICALWordPress Multi Purpose Mail Form plugin <= 1.0.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-42523HIGHpubliccms V4.0.202302.e and before is vulnerable to Any File Upload via publiccms/admin/cmsTemplate/saveMetaDataEPSS 0.5%CVE-2024-13201MEDIUMwander-chu SpringBoot-Blog Admin Attachment AttachtController.java upload unrestricted uploadEPSS 0.5%CVE-2025-22782CRITICALWordPress WR Price List Manager For Woocommerce plugin <= 1.0.8 - Remote Code Execution (RCE) vulnerabilityEPSS 0.5%CVE-2026-53593HIGHFreeScout Vulnerable to Authenticated Remote Code Execution via incomplete upload extension denylist (.pht) — bypass of CVE-2025-48471EPSS 0.5%CVE-2026-39292HIGHFalco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the pagemanager/pagebuilder module that allows EPSS 0.5%CVE-2026-10071CRITICALInterinfo｜DreamMaker - Arbitrary File UploadEPSS 0.5%CVE-2026-53599HIGHRedaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlersEPSS 0.5%CVE-2024-6948MEDIUMGargaj wuhu Slide Editor slideeditor.php unrestricted uploadEPSS 0.5%CVE-2025-15240HIGHQuanta Computer｜QOCA aim AI Medical Cloud Platform - Arbitrary File UploadEPSS 0.5%CVE-2026-55676HIGHMalcolm vulnerable to RCE via unrestricted .php upload to the file-upload componentEPSS 0.5%CVE-2026-76174CRITICALMultiple vulnerabilities in Ocsreports for OCS Inventory NGEPSS 0.5%