Weaknesses of type CWE-434

3,092 results

Upload sem restrição de arquivo com tipo perigoso

Ocorre quando uma aplicação aceita upload de arquivos sem validar adequadamente seu tipo, extensão ou conteúdo. Um atacante pode enviar executáveis, scripts ou outros arquivos maliciosos, que serão armazenados ou executados no servidor, comprometendo sua integridade e segurança.

Example

Um formulário de perfil aceita qualquer arquivo como 'foto do usuário' sem checar extensão ou MIME type. Um atacante envia um arquivo .exe ou .php renomeado como .jpg, que é salvo no diretório web e posteriormente executado quando acessado, permitindo execução de código remoto.

How to mitigate

Valide uploads checando MIME type real (não apenas extensão), restrinja tipos permitidos de forma explícita, armazene arquivos fora da raiz web, desabilite execução de scripts no diretório de upload e considere usar vírus scanner. Implemente whitelist rigorosa, nunca blacklist.

CVE-2026-65640HIGHWordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. PrEPSS 0.8%CVE-2023-28170CRITICALWordPress Theme Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File UploadEPSS 0.8%CVE-2024-42780HIGHAn Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_genre" in Kashipara Music Management System v1.0. This aEPSS 0.8%CVE-2022-45548HIGHAyaCMS v3.1.2 has an Arbitrary File Upload vulnerability.EPSS 0.8%CVE-2021-4455CRITICALWordpress Plugin Smart Product Review <= 1.0.4 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2024-8614CRITICALWP JobSearch <= 2.6.7 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.8%CVE-2023-1303MEDIUMUCMS System File Management Module fileedit.php unrestricted uploadEPSS 0.8%CVE-2025-68398CRITICALWeblate has git config file overwrite vulnerability that leads to remote code executionEPSS 0.8%CVE-2024-32836CRITICALWordPress WP-Lister Lite for eBay plugin <= 3.5.11 - Arbitrary File Upload vulnerabilityEPSS 0.8%CVE-2022-0472HIGHUnrestricted Upload of File with Dangerous Type in jsdecena/laracomEPSS 0.8%CVE-2023-52044CRITICALStudio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extensiEPSS 0.8%CVE-2024-31680HIGHFile Upload vulnerability in Shibang Communications Co., Ltd. IP network intercom broadcasting system v.1.0 allows a local attacker to execuEPSS 0.8%CVE-2023-1484MEDIUMxzjie cms upload unrestricted uploadEPSS 0.8%CVE-2024-25846CRITICALIn the module "Product Catalog (CSV, Excel) Import" (simpleimportproduct) <= 6.7.0 from MyPrestaModules for PrestaShop, a guest can upload fEPSS 0.8%CVE-2020-6975—Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Successful exploitation of thisEPSS 0.8%CVE-2024-3412CRITICALWP STAGING WordPress Backup Plugin – Migration Backup Restore <= 3.4.3 - Authenticated (Admin+) Arbitrary File UploadEPSS 0.8%CVE-2024-8743MEDIUMBit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File UploadEPSS 0.8%CVE-2023-5919MEDIUMSourceCodester Company Website CMS Create Blog Page createblog unrestricted uploadEPSS 0.8%CVE-2024-42779HIGHAn Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_music" in Kashipara Music Management System v1.0. This aEPSS 0.8%CVE-2024-42778HIGHAn Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0. ThiEPSS 0.8%