Weaknesses of type CWE-434

3,091 results

Upload sem restrição de arquivo com tipo perigoso

Ocorre quando uma aplicação aceita upload de arquivos sem validar adequadamente seu tipo, extensão ou conteúdo. Um atacante pode enviar executáveis, scripts ou outros arquivos maliciosos, que serão armazenados ou executados no servidor, comprometendo sua integridade e segurança.

Example

Um formulário de perfil aceita qualquer arquivo como 'foto do usuário' sem checar extensão ou MIME type. Um atacante envia um arquivo .exe ou .php renomeado como .jpg, que é salvo no diretório web e posteriormente executado quando acessado, permitindo execução de código remoto.

How to mitigate

Valide uploads checando MIME type real (não apenas extensão), restrinja tipos permitidos de forma explícita, armazene arquivos fora da raiz web, desabilite execução de scripts no diretório de upload e considere usar vírus scanner. Implemente whitelist rigorosa, nunca blacklist.

CVE-2024-29514HIGHFile Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP fiEPSS 1.3%CVE-2023-27168CRITICALAn arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp fiEPSS 1.3%CVE-2025-7437CRITICALEbook Store <= 5.8012 - Unauthenticated Arbitrary File UploadEPSS 1.3%CVE-2023-6636HIGHGreenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File UploadEPSS 1.3%CVE-2023-6826HIGHE2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File UploadEPSS 1.3%CVE-2025-28915CRITICALWordPress ThemeEgg ToolKit plugin <= 1.2.9 - Arbitrary File Upload vulnerabilityEPSS 1.3%CVE-2026-7537HIGHMDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via 'mdjm_email_upload_file' ParameterEPSS 1.3%CVE-2022-48008CRITICALAn arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a crafted EPSS 1.3%CVE-2023-6827HIGHEssential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 1.3%CVE-2024-56249CRITICALWordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerabilityEPSS 1.3%CVE-2020-20067HIGHFile upload vulnerability in ebCMS v.1.1.0 allows a remote attacker to execute arbitrary code via the upload type parameter.EPSS 1.3%CVE-2020-21325HIGHAn issue in WUZHI CMS v.4.1.0 allows a remote attacker to execute arbitrary code via the set_chache method of the function\common.func.php fEPSS 1.3%CVE-2022-50939HIGHe107 CMS v3.2.1 - Upload Restriction Bypass with Path Traversal File OverrideEPSS 1.3%CVE-2026-48283CRITICALColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)EPSS 1.3%CVE-2026-48276CRITICALColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)EPSS 1.3%CVE-2026-4201MEDIUMglowxq glowxq-oj SysFileController.java upload unrestricted uploadEPSS 1.3%CVE-2021-32961HIGHMDT AutoSave Unrestricted Upload of File with Dangerous TypeEPSS 1.3%CVE-2020-20919HIGHFile upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary code and access sensitive information viaEPSS 1.3%CVE-2023-22726HIGHUnrestricted file upload leading to privilege escalation in actEPSS 1.3%CVE-2023-35808HIGHAn issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. An Unrestricted File Upload vulnerability has been idenEPSS 1.3%