Weaknesses of type CWE-434

3,255 results

Upload sem restrição de arquivo com tipo perigoso

Ocorre quando uma aplicação aceita upload de arquivos sem validar adequadamente seu tipo, extensão ou conteúdo. Um atacante pode enviar executáveis, scripts ou outros arquivos maliciosos, que serão armazenados ou executados no servidor, comprometendo sua integridade e segurança.

Example

Um formulário de perfil aceita qualquer arquivo como 'foto do usuário' sem checar extensão ou MIME type. Um atacante envia um arquivo .exe ou .php renomeado como .jpg, que é salvo no diretório web e posteriormente executado quando acessado, permitindo execução de código remoto.

How to mitigate

Valide uploads checando MIME type real (não apenas extensão), restrinja tipos permitidos de forma explícita, armazene arquivos fora da raiz web, desabilite execução de scripts no diretório de upload e considere usar vírus scanner. Implemente whitelist rigorosa, nunca blacklist.

CVE-2022-2128CRITICALUnrestricted Upload of File with Dangerous Type in polonel/trudeskEPSS 2.9%CVE-2023-6274MEDIUMByzoro Smart S80 PHP File updatelib.php unrestricted uploadEPSS 2.9%CVE-2025-34121CRITICALIdera Up.Time ≤ 7.2 post2file.php Arbitrary File Upload RCEEPSS 2.8%CVE-2020-15189MEDIUMRemote Code Execution in SOY CMSEPSS 2.8%CVE-2025-23942CRITICALWordPress WP Load Gallery Plugin <= 2.1.6 - Arbitrary File Upload vulnerabilityEPSS 2.8%CVE-2019-18313—A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 ServEPSS 2.8%CVE-2021-38484CRITICALInHand Networks IR615 RouterEPSS 2.8%CVE-2026-27540CRITICALWordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerabilityEPSS 2.7%CVE-2024-23534HIGHAn Unrestricted File-upload vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to executEPSS 2.7%CVE-2014-125116CRITICALHybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration InjectionEPSS 2.7%CVE-2017-6027—An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web EPSS 2.6%CVE-2021-26918CRITICALThe ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of the "Send an image when a userEPSS 2.6%CVE-2024-11138MEDIUMDedeCMS friendlink_add.php unrestricted uploadEPSS 2.6%CVE-2012-10030CRITICALFreeFloat FTP Server Arbitrary File UploadEPSS 2.6%CVE-2024-32700CRITICALWordPress Kognetiks Chatbot for WordPress plugin <= 2.0.0 - Arbitrary File Upload vulnerabilityEPSS 2.6%CVE-2025-34111CRITICALTiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCEEPSS 2.6%CVE-2025-3616HIGHGreenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 2.6%CVE-2017-16594—This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.7EPSS 2.6%CVE-2013-10043CRITICALAstium VOIP PBX <= 2.1 SQL Injection File Upload RCEEPSS 2.6%CVE-2023-3187MEDIUMPHPGurukul Teachers Record Management System Profile Picture changeimage.php unrestricted uploadEPSS 2.6%