Weaknesses of type CWE-434

3,098 results

Upload sem restrição de arquivo com tipo perigoso

Ocorre quando uma aplicação aceita upload de arquivos sem validar adequadamente seu tipo, extensão ou conteúdo. Um atacante pode enviar executáveis, scripts ou outros arquivos maliciosos, que serão armazenados ou executados no servidor, comprometendo sua integridade e segurança.

Example

Um formulário de perfil aceita qualquer arquivo como 'foto do usuário' sem checar extensão ou MIME type. Um atacante envia um arquivo .exe ou .php renomeado como .jpg, que é salvo no diretório web e posteriormente executado quando acessado, permitindo execução de código remoto.

How to mitigate

Valide uploads checando MIME type real (não apenas extensão), restrinja tipos permitidos de forma explícita, armazene arquivos fora da raiz web, desabilite execução de scripts no diretório de upload e considere usar vírus scanner. Implemente whitelist rigorosa, nunca blacklist.

CVE-2023-50729HIGHAn unrestricted file upload vulnerability in traccar leads to RCEEPSS 0.6%CVE-2025-63601CRITICALSnipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious bacEPSS 0.6%CVE-2023-7147MEDIUMgopeak MasterLab User.php base64ImageContent unrestricted uploadEPSS 0.6%CVE-2024-37555CRITICALWordPress Generate PDF using Contact Form 7 plugin <= 4.1.2 - CSRF to Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2025-32206CRITICALWordPress Processing Projects Plugin <= 1.0.2 - Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2022-45377MEDIUMWordPress Drag and Drop Multiple File Upload for WooCommerce Plugin <= 1.0.8 is vulnerable to Multiple VulnerabilitiesEPSS 0.6%CVE-2011-10004MEDIUMreciply Plugin uploadImage.php unrestricted uploadEPSS 0.6%CVE-2026-46400HIGHHAXCMS PHP has a File Upload Validation BypassEPSS 0.6%CVE-2025-61417HIGHCross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component. Attackers can upload a EPSS 0.6%CVE-2021-47965CRITICALWordPress Plugin WP Super Edit 2.5.4 Unrestricted File UploadEPSS 0.6%CVE-2026-0911HIGHHustle <= 7.8.9.2 - Authenticated (Subscriber+) Arbitrary File Upoload via Module ImportEPSS 0.6%CVE-2024-1925MEDIUMCtcms Upsys.php unrestricted uploadEPSS 0.6%CVE-2025-54448CRITICALUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affEPSS 0.6%CVE-2023-42472HIGHInsufficient File type validation in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)EPSS 0.6%CVE-2025-54444CRITICALUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affEPSS 0.6%CVE-2024-7495MEDIUMitsourcecode Laravel Accounting System HomeController.php unrestricted uploadEPSS 0.6%CVE-2021-4096HIGHFancy Product Designer <= 4.7.5 - Cross-Site Request Forgery to Arbitrary File UploadEPSS 0.6%CVE-2023-4988MEDIUMBettershop LaikeTui unrestricted uploadEPSS 0.6%CVE-2024-44220MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. Parsing a maliciouslyEPSS 0.6%CVE-2025-13536HIGHBlubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post'EPSS 0.6%