Weaknesses of type CWE-434

3,080 results

Upload sem restrição de arquivo com tipo perigoso

Ocorre quando uma aplicação aceita upload de arquivos sem validar adequadamente seu tipo, extensão ou conteúdo. Um atacante pode enviar executáveis, scripts ou outros arquivos maliciosos, que serão armazenados ou executados no servidor, comprometendo sua integridade e segurança.

Example

Um formulário de perfil aceita qualquer arquivo como 'foto do usuário' sem checar extensão ou MIME type. Um atacante envia um arquivo .exe ou .php renomeado como .jpg, que é salvo no diretório web e posteriormente executado quando acessado, permitindo execução de código remoto.

How to mitigate

Valide uploads checando MIME type real (não apenas extensão), restrinja tipos permitidos de forma explícita, armazene arquivos fora da raiz web, desabilite execução de scripts no diretório de upload e considere usar vírus scanner. Implemente whitelist rigorosa, nunca blacklist.

CVE-2023-5148MEDIUMD-Link DAR-7000/DAR-8000 uploadfile.php unrestricted uploadEPSS 30.7%CVE-2025-34511HIGHSitecore PowerShell Extension RCE via Unrestricted UploadEPSS 29.8%CVE-2024-32002CRITICALGit's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code ExecutionEPSS 29.2%CVE-2023-50564HIGHAn arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary EPSS 29.1%CVE-2025-1128CRITICALEverest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and DeletionEPSS 28.8%CVE-2023-2648MEDIUMWeaver E-Office uploadify.php unrestricted uploadEPSS 28.5%CVE-2026-3844CRITICALBreeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remoteEPSS 27.7%CVE-2018-4063HIGHAn exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A speciEPSS 27.1%KEVCVE-2024-5247HIGHNETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution VulnerabilityEPSS 26.9%CVE-2023-5147MEDIUMD-Link DAR-7000 updateos.php unrestricted uploadEPSS 26.6%CVE-2023-3852MEDIUMOpenRapid RapidCMS upload.php unrestricted uploadEPSS 25.2%CVE-2026-3891CRITICALPix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File UploadEPSS 25.1%CVE-2022-1952—eaSYNC < 1.1.16 - Unauthenticated Arbitrary File UploadEPSS 24.9%CVE-2023-2924MEDIUMSupcon SimField reportupload.aspx unrestricted uploadEPSS 24.3%CVE-2022-0863—WP SVG Icons <= 3.2.3 - Admin+ Remote Code Execution (RCE)EPSS 23.8%CVE-2024-27747CRITICALFile Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the EPSS 23.6%CVE-2022-40878HIGHIn Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code ExeEPSS 23.2%CVE-2023-5150MEDIUMD-Link DAR-7000/DAR-8000 web.php unrestricted uploadEPSS 22.8%CVE-2024-29974CRITICAL** UNSUPPORTED WHEN ASSIGNED ** The remote code execution vulnerability in the CGI program “file_upload-cgi” in Zyxel NAS326 firmware versioEPSS 22.8%CVE-2025-2005CRITICALFront-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File UploadEPSS 22.0%