Weaknesses of type CWE-434

3,101 results

Upload sem restrição de arquivo com tipo perigoso

Ocorre quando uma aplicação aceita upload de arquivos sem validar adequadamente seu tipo, extensão ou conteúdo. Um atacante pode enviar executáveis, scripts ou outros arquivos maliciosos, que serão armazenados ou executados no servidor, comprometendo sua integridade e segurança.

Example

Um formulário de perfil aceita qualquer arquivo como 'foto do usuário' sem checar extensão ou MIME type. Um atacante envia um arquivo .exe ou .php renomeado como .jpg, que é salvo no diretório web e posteriormente executado quando acessado, permitindo execução de código remoto.

How to mitigate

Valide uploads checando MIME type real (não apenas extensão), restrinja tipos permitidos de forma explícita, armazene arquivos fora da raiz web, desabilite execução de scripts no diretório de upload e considere usar vírus scanner. Implemente whitelist rigorosa, nunca blacklist.

CVE-2026-19513HIGHGravity Forms <= 3.0.2 - Unauthenticated Arbitrary File Upload via State/Chunk Hash ConfusionEPSS 0.5%CVE-2025-54440CRITICALUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affEPSS 0.5%CVE-2020-37073HIGHVictor CMS 1.0 - Authenticated Arbitrary File UploadEPSS 0.5%CVE-2025-37175HIGHAuthenticated Arbitrary File Upload Vulnerability in AOS-10 or AOS-8 Web-Based Management InterfaceEPSS 0.5%CVE-2025-3830MEDIUMkuangstudy KuangSimpleBBS QuestionController.java fileUpload unrestricted uploadEPSS 0.5%CVE-2026-90603MEDIUMAnil-matcha Open-Generative-AI S3 Upload upload-binary unrestricted uploadEPSS 0.5%CVE-2025-3410MEDIUMmymagicpower AIAS LocalStorageController.java unrestricted uploadEPSS 0.5%CVE-2026-15488MEDIUMhcr707305003 shiroiAdmin FileController.php upload unrestricted uploadEPSS 0.5%CVE-2026-18788MEDIUMTrippo ResponsiveFilemanager dialog.php unrestricted uploadEPSS 0.5%CVE-2026-28114CRITICALWordPress WooCommerce License Manager plugin <= 7.0.6 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-27064CRITICALWordPress Mailster plugin <= 4.1.17 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-54416HIGHPluck CMS - Unrestricted File Upload via Missing .php8 Extension in Upload BlacklistEPSS 0.5%CVE-2026-66600CRITICALWordPress Media LIbrary Assistant plugin <= 3.39 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-65461CRITICALWordPress Really Simple CSV Importer plugin <= 1.3 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2025-6872MEDIUMSourceCodester Simple Company Website SystemSettings.php unrestricted uploadEPSS 0.5%CVE-2026-27043HIGHWordPress Photography theme < 7.7.6 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2025-6873MEDIUMSourceCodester Simple Company Website Users.php unrestricted uploadEPSS 0.5%CVE-2026-27067CRITICALWordPress Mobile App Editor plugin <= 1.3.1 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-81650HIGHNextGEN Gallery < 4.5.0 - Authenticated Arbitrary File Upload via ZIP ImportEPSS 0.5%CVE-2026-13157HIGHTheme Demo Import <= 1.1.3 - Admin+ Arbitrary File UploadEPSS 0.5%