Weaknesses of type CWE-434

3,091 results

Upload sem restrição de arquivo com tipo perigoso

Ocorre quando uma aplicação aceita upload de arquivos sem validar adequadamente seu tipo, extensão ou conteúdo. Um atacante pode enviar executáveis, scripts ou outros arquivos maliciosos, que serão armazenados ou executados no servidor, comprometendo sua integridade e segurança.

Example

Um formulário de perfil aceita qualquer arquivo como 'foto do usuário' sem checar extensão ou MIME type. Um atacante envia um arquivo .exe ou .php renomeado como .jpg, que é salvo no diretório web e posteriormente executado quando acessado, permitindo execução de código remoto.

How to mitigate

Valide uploads checando MIME type real (não apenas extensão), restrinja tipos permitidos de forma explícita, armazene arquivos fora da raiz web, desabilite execução de scripts no diretório de upload e considere usar vírus scanner. Implemente whitelist rigorosa, nunca blacklist.

CVE-2026-8778CRITICALMIPL Grouped Checkout Fields for WooCommerce <= 1.2.2 - Unauthenticated Arbitrary File UploadEPSS 1.1%CVE-2022-39305CRITICALGin-vue-admin vulnerable to Unrestricted Upload of File with Dangerous TypeEPSS 1.1%CVE-2026-4809CRITICALUnsafe Client MIME Type Handling Can Enable Arbitrary File Upload in plank/laravel-mediableEPSS 1.1%CVE-2023-29721CRITICALSofaWiki <= 3.8.9 has a file upload vulnerability that leads to command execution.EPSS 1.1%CVE-2023-6979HIGHCustomer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File UploadEPSS 1.1%CVE-2024-1567HIGHRoyal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File UploadEPSS 1.1%CVE-2025-0394HIGHGroundhogg <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload FunctionEPSS 1.1%CVE-2024-26503CRITICALUnrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code vEPSS 1.1%CVE-2020-6965—In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X EPSS 1.1%CVE-2023-53952HIGHDotclear 2.25.3 Authenticated Remote Code Execution via File UploadEPSS 1.1%CVE-2022-2420HIGHURVE Web Manager uploader.php unrestricted uploadEPSS 1.1%CVE-2025-34329CRITICALAudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Backup Upload RCE via ajaxBackupUploadFile.phpEPSS 1.1%CVE-2024-8019CRITICALArbitrary File Write/Overwrite in lightning-ai/pytorch-lightningEPSS 1.1%CVE-2023-47129HIGHStatamic CMS remote code execution via front-end form uploadsEPSS 1.1%CVE-2025-48471HIGHFreeScout Vulnerable to Arbitrary File UploadEPSS 1.1%CVE-2025-4800HIGHMasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 1.1%CVE-2022-43231HIGHCanteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/manage_website.php. This vulEPSS 1.1%CVE-2022-45039HIGHAn arbitrary file upload vulnerability in the Server Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary code via a craEPSS 1.1%CVE-2010-1433—Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify user-suEPSS 1.1%CVE-2023-25132CRITICALUnrestricted upload of file with dangerous type vulnerability in CyberPower PowerPanel BusinessEPSS 1.1%