Weaknesses of type CWE-434

3,091 results

Upload sem restrição de arquivo com tipo perigoso

Ocorre quando uma aplicação aceita upload de arquivos sem validar adequadamente seu tipo, extensão ou conteúdo. Um atacante pode enviar executáveis, scripts ou outros arquivos maliciosos, que serão armazenados ou executados no servidor, comprometendo sua integridade e segurança.

Example

Um formulário de perfil aceita qualquer arquivo como 'foto do usuário' sem checar extensão ou MIME type. Um atacante envia um arquivo .exe ou .php renomeado como .jpg, que é salvo no diretório web e posteriormente executado quando acessado, permitindo execução de código remoto.

How to mitigate

Valide uploads checando MIME type real (não apenas extensão), restrinja tipos permitidos de forma explícita, armazene arquivos fora da raiz web, desabilite execução de scripts no diretório de upload e considere usar vírus scanner. Implemente whitelist rigorosa, nunca blacklist.

CVE-2023-1415MEDIUMSimple Art Gallery adminHome.php sliderPicSubmit unrestricted uploadEPSS 1.0%CVE-2026-15965HIGHMaxUpload <= 1.4.0 - Unauthenticated Arbitrary File Upload via 'resumableFilename' ParameterEPSS 1.0%CVE-2022-47042HIGHMCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do.EPSS 1.0%CVE-2026-61524HIGHWebsiteBaker CMS < 2.13.10 File Upload RCE via Module InstallationEPSS 1.0%CVE-2024-4397HIGHLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File UploadEPSS 1.0%CVE-2023-30613HIGHKiwi TCMS unrestricted file upload vulnerabilityEPSS 1.0%CVE-2023-38029CRITICALSaho ADM100&ADM-100FP - Arbitrary File UploadEPSS 1.0%CVE-2023-5860HIGHIcons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File UploadEPSS 1.0%CVE-2025-9846CRITICALUnrestricted File Upload in TaletSys Inka.NetEPSS 1.0%CVE-2023-47621HIGHRemote code execution via file uploads in guest-entries EPSS 1.0%CVE-2026-29041HIGHChamilo: Authenticated Remote Code Execution via Unrestricted File UploadEPSS 1.0%CVE-2024-3912CRITICALASUS Router - Upload arbitrary firmwareEPSS 1.0%CVE-2022-2883HIGHIn affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of ServiceEPSS 1.0%CVE-2024-4389HIGHSlider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File UploadEPSS 1.0%CVE-2024-58282HIGHSerendipity 2.5.0 Remote Code Execution via Authenticated Media UploadEPSS 1.0%CVE-2024-50510CRITICALWordPress AR For Woocommerce plugin <= 6.3 - Arbitrary File Upload vulnerabilityEPSS 1.0%CVE-2012-10056HIGHPHP Volunteer Management System 1.0.2 Arbitrary File UploadEPSS 1.0%CVE-2023-23328HIGHA File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileUpload.php by uploadiEPSS 1.0%CVE-2023-0670HIGHUlearn version a5a7ca20de859051ea0470542844980a66dfc05d allows an attacker with administrator permissions to obtain remote code execution onEPSS 1.0%CVE-2023-53933HIGHSerendipity 2.4.0 Authenticated Remote Code Execution via File UploadEPSS 1.0%