Fallos del tipo CWE-434

3255 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2022-2128CRITICALUnrestricted Upload of File with Dangerous Type in polonel/trudeskEPSS 2.9%CVE-2023-6274MEDIUMByzoro Smart S80 PHP File updatelib.php unrestricted uploadEPSS 2.9%CVE-2025-34121CRITICALIdera Up.Time ≤ 7.2 post2file.php Arbitrary File Upload RCEEPSS 2.8%CVE-2020-15189MEDIUMRemote Code Execution in SOY CMSEPSS 2.8%CVE-2025-23942CRITICALWordPress WP Load Gallery Plugin <= 2.1.6 - Arbitrary File Upload vulnerabilityEPSS 2.8%CVE-2019-18313—A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 ServEPSS 2.8%CVE-2021-38484CRITICALInHand Networks IR615 RouterEPSS 2.8%CVE-2026-27540CRITICALWordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerabilityEPSS 2.7%CVE-2024-23534HIGHAn Unrestricted File-upload vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to executEPSS 2.7%CVE-2014-125116CRITICALHybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration InjectionEPSS 2.7%CVE-2017-6027—An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web EPSS 2.6%CVE-2021-26918CRITICALThe ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of the "Send an image when a userEPSS 2.6%CVE-2024-11138MEDIUMDedeCMS friendlink_add.php unrestricted uploadEPSS 2.6%CVE-2012-10030CRITICALFreeFloat FTP Server Arbitrary File UploadEPSS 2.6%CVE-2024-32700CRITICALWordPress Kognetiks Chatbot for WordPress plugin <= 2.0.0 - Arbitrary File Upload vulnerabilityEPSS 2.6%CVE-2025-34111CRITICALTiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCEEPSS 2.6%CVE-2025-3616HIGHGreenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 2.6%CVE-2017-16594—This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.7EPSS 2.6%CVE-2013-10043CRITICALAstium VOIP PBX <= 2.1 SQL Injection File Upload RCEEPSS 2.6%CVE-2023-3187MEDIUMPHPGurukul Teachers Record Management System Profile Picture changeimage.php unrestricted uploadEPSS 2.6%