Weaknesses of type CWE-434

3,255 results

Upload sem restrição de arquivo com tipo perigoso

Ocorre quando uma aplicação aceita upload de arquivos sem validar adequadamente seu tipo, extensão ou conteúdo. Um atacante pode enviar executáveis, scripts ou outros arquivos maliciosos, que serão armazenados ou executados no servidor, comprometendo sua integridade e segurança.

Example

Um formulário de perfil aceita qualquer arquivo como 'foto do usuário' sem checar extensão ou MIME type. Um atacante envia um arquivo .exe ou .php renomeado como .jpg, que é salvo no diretório web e posteriormente executado quando acessado, permitindo execução de código remoto.

How to mitigate

Valide uploads checando MIME type real (não apenas extensão), restrinja tipos permitidos de forma explícita, armazene arquivos fora da raiz web, desabilite execução de scripts no diretório de upload e considere usar vírus scanner. Implemente whitelist rigorosa, nunca blacklist.

CVE-2023-32525—Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary fileEPSS 2.0%CVE-2023-32526—Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary fileEPSS 2.0%CVE-2025-15503MEDIUMSangfor Operation and Maintenance Management System common.jsp unrestricted uploadEPSS 2.0%CVE-2023-29930HIGHAn issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute arbitrary code via EPSS 2.0%CVE-2024-34833CRITICALSourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "save_settings" page. An unautheEPSS 2.0%CVE-2012-10036CRITICALProject Pier <= 0.8.8 Arbitrary File Upload RCEEPSS 2.0%CVE-2021-41566CRITICALTad TadTools - Arbitrary File UploadEPSS 2.0%CVE-2021-32538CRITICALARTWARE CMS - Unrestricted Upload of FileEPSS 2.0%CVE-2022-41705CRITICALBadaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because thEPSS 2.0%CVE-2023-46808CRITICALAn file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes to the server. SuccessEPSS 2.0%CVE-2012-10026CRITICALWordPress Plugin Asset-Manager <= 2.0 PHP File UploadEPSS 2.0%CVE-2023-27602CRITICALApache Linkis publicsercice module unrestricted upload of fileEPSS 2.0%CVE-2026-32475CRITICALWordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerabilityEPSS 2.0%CVE-2023-26852HIGHAn arbitrary file upload vulnerability in the upload plugin of Textpattern v4.8.8 and below allows attackers to execute arbitrary code by upEPSS 2.0%CVE-2026-25099HIGHRemote Code Execution via Unrestricted File Upload in BluditEPSS 2.0%CVE-2015-1784—In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the weEPSS 2.0%CVE-2014-125119HIGHWinRAR < 5.00 Filename Spoofing RCEEPSS 2.0%CVE-2023-45554CRITICALFile Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via modification of the imageext parameter frEPSS 2.0%CVE-2021-24493—Shopp eCommerce <= 1.4 - Unauthenticated Arbitrary File UploadEPSS 2.0%CVE-2023-5490MEDIUMByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform userattestation.php unrestricted uploadEPSS 2.0%