Weaknesses of type CWE-434

3,097 results

Upload sem restrição de arquivo com tipo perigoso

Ocorre quando uma aplicação aceita upload de arquivos sem validar adequadamente seu tipo, extensão ou conteúdo. Um atacante pode enviar executáveis, scripts ou outros arquivos maliciosos, que serão armazenados ou executados no servidor, comprometendo sua integridade e segurança.

Example

Um formulário de perfil aceita qualquer arquivo como 'foto do usuário' sem checar extensão ou MIME type. Um atacante envia um arquivo .exe ou .php renomeado como .jpg, que é salvo no diretório web e posteriormente executado quando acessado, permitindo execução de código remoto.

How to mitigate

Valide uploads checando MIME type real (não apenas extensão), restrinja tipos permitidos de forma explícita, armazene arquivos fora da raiz web, desabilite execução de scripts no diretório de upload e considere usar vírus scanner. Implemente whitelist rigorosa, nunca blacklist.

CVE-2024-7904MEDIUMDedeBIZ File Extension file_manage_control.php unrestricted uploadEPSS 0.7%CVE-2024-9794MEDIUMCodezips Online Shopping Portal update-image1.php unrestricted uploadEPSS 0.7%CVE-2025-1818MEDIUMzj1983 zz ZfileAction.upload unrestricted uploadEPSS 0.7%CVE-2026-54414CRITICALFileRise shared-folder upload path traversal allows arbitrary file write and admin takeoverEPSS 0.7%CVE-2026-54611MEDIUMInstantCMS has Remote Code Execution in package installerEPSS 0.7%CVE-2024-29135CRITICALWordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerabilityEPSS 0.7%CVE-2023-45197CRITICALAdminer and AdminerEvo vulnerable to directory traversal and file uploadEPSS 0.7%CVE-2024-11214MEDIUMSourceCodester Best Employee Management System profile.php unrestricted uploadEPSS 0.7%CVE-2025-23953CRITICALWordPress user files plugin <= 2.4.2 - Arbitrary File Upload vulnerabilityEPSS 0.7%CVE-2025-6057HIGHWPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.7%CVE-2026-3748MEDIUMBytedesk SVG File UploadRestController.java uploadFile unrestricted uploadEPSS 0.7%CVE-2024-40545HIGHAn arbitrary file upload vulnerability in the component /admin/cmsWebFile/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arEPSS 0.7%CVE-2018-25436CRITICALWordPress Plugin Baggage Freight Shipping Australia 0.1.0 Arbitrary File UploadEPSS 0.7%CVE-2025-12957HIGHAll-in-One Video Gallery <= 4.5.7 - Authenticated (Author+) Arbitrary File Upload via VTT Upload BypassEPSS 0.7%CVE-2026-36669CRITICALAn unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote attackers to upload EPSS 0.7%CVE-2024-7905MEDIUMDedeBIZ archives_do.php AdminUpload unrestricted uploadEPSS 0.7%CVE-2025-48889MEDIUMGradio Allows Unauthorized File Copy via Path ManipulationEPSS 0.7%CVE-2025-29394HIGHAn insecure permissions vulnerability in verydows v2.0 allows a remote attacker to execute arbitrary code by uploading a file type.EPSS 0.7%CVE-2025-32118CRITICALWordPress CMP – Coming Soon & Maintenance plugin <= 4.1.14 - Remote Code Execution (RCE) vulnerabilityEPSS 0.7%CVE-2025-31002CRITICALWordPress Squeeze plugin <= 1.6 - Arbitrary File Upload vulnerabilityEPSS 0.7%