Weaknesses of type CWE-434

3,102 results

Upload sem restrição de arquivo com tipo perigoso

Ocorre quando uma aplicação aceita upload de arquivos sem validar adequadamente seu tipo, extensão ou conteúdo. Um atacante pode enviar executáveis, scripts ou outros arquivos maliciosos, que serão armazenados ou executados no servidor, comprometendo sua integridade e segurança.

Example

Um formulário de perfil aceita qualquer arquivo como 'foto do usuário' sem checar extensão ou MIME type. Um atacante envia um arquivo .exe ou .php renomeado como .jpg, que é salvo no diretório web e posteriormente executado quando acessado, permitindo execução de código remoto.

How to mitigate

Valide uploads checando MIME type real (não apenas extensão), restrinja tipos permitidos de forma explícita, armazene arquivos fora da raiz web, desabilite execução de scripts no diretório de upload e considere usar vírus scanner. Implemente whitelist rigorosa, nunca blacklist.

CVE-2024-53982HIGHArbitrary file download in Zoo-Project Echo ExampleEPSS 0.5%CVE-2026-42844HIGHGrav: Low-privileged API users can create super-admin accounts via blueprint-uploadEPSS 0.5%CVE-2025-1070HIGHCWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable when a malicious file EPSS 0.5%CVE-2026-27419CRITICALWordPress Zegen theme <= 1.1.9 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-72557HIGHCockpit CMS Cockpit CMS - Unrestricted File UploadEPSS 0.5%CVE-2026-57710CRITICALWordPress WoowBot Pro Max plugin <= 14.1.7 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-32559CRITICALWordPress UltimateAI plugin <= 3.1.0 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-74018CRITICALWordPress Warehouse Cargo theme <= 2.6.9 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-32536CRITICALWordPress Green Downloads plugin <= 2.08 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-7906MEDIUMDedeBIZ Attachment Settings select_images_post.php get_mime_type unrestricted uploadEPSS 0.5%CVE-2026-25446CRITICALWordPress WishList Member X plugin <= 3.29.0 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-39591CRITICALWordPress WP-BusinessDirectory plugin <= 4.0.0 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-40747CRITICALWordPress Ecommerce Zone theme <= 0.9.7 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-40748CRITICALWordPress Kids Gift Shop theme <= 0.5.4 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-56027CRITICALWordPress Booster for WooCommerce plugin <= 8.0.1 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-74016CRITICALWordPress Smart Cleaning theme <= 4.8.6 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-42748CRITICALWordPress WPify Woo Czech plugin <= 5.4.1 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-40750CRITICALWordPress Kids Online Store theme <= 0.8.9 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-32474CRITICALWordPress Templatiq plugin <= 0.2.5 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-32482CRITICALWordPress Ona theme < 1.24 - Arbitrary File Upload vulnerabilityEPSS 0.5%