Fallos del tipo CWE-434

3099 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2024-45137HIGHInDesign Desktop | Unrestricted Upload of File with Dangerous Type (CWE-434)EPSS 0.3%CVE-2024-45136HIGHInCopy | Unrestricted Upload of File with Dangerous Type (CWE-434)EPSS 0.3%CVE-2025-49329MEDIUMWordPress Store Locator WordPress plugin <= 1.5.2 - Arbitrary File Upload VulnerabilityEPSS 0.3%CVE-2026-85134HIGHArbitrary File Upload Leading to Remote Command Execution in Bimser's eBA PlusEPSS 0.3%CVE-2026-23499HIGHSaleor vulnerable to stored XSS via Unrestricted File UploadEPSS 0.3%CVE-2025-60731HIGHPerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme functionEPSS 0.3%CVE-2025-60735HIGHPerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin functionEPSS 0.3%CVE-2026-22789MEDIUMWebErpMesv2 has a File Upload Validation Bypass Leading to RCEEPSS 0.3%CVE-2025-65416MEDIUMdocuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php.EPSS 0.3%CVE-2025-62182MEDIUMPega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability, where a privileged user could potentially upload a malicious file.EPSS 0.3%CVE-2025-64176MEDIUMThinkDashboard: Arbitrary File Upload vulnerability in the Backup Import FeatureEPSS 0.3%CVE-2026-54179MEDIUMbackpack/crud: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public diskEPSS 0.3%CVE-2025-12344MEDIUMYonyou U8 Cloud Request Header NCloudGatewayServlet unrestricted uploadEPSS 0.3%CVE-2025-10755MEDIUMSelleo Mentingo Content-Type unrestricted uploadEPSS 0.3%CVE-2025-10669MEDIUMAirsonic-Advanced Playlist Upload unrestricted uploadEPSS 0.3%CVE-2025-70849MEDIUMArbitrary File Upload in podinfo thru 6.9.0 allows unauthenticated attackers to upload arbitrary files via crafted POST request to the /storEPSS 0.3%CVE-2025-13198MEDIUMDouPHP file.class.php unrestricted uploadEPSS 0.3%CVE-2024-42180LOWHCL MyXalytics is affected by a malicious file upload vulnerabilityEPSS 0.3%CVE-2024-1332MEDIUMCustom Fonts – Host Your Fonts Locally <= 2.1.4 - Authenticated (Author+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-1879MEDIUMHarvard University IQSS Dataverse Theme Customization ThemeAndWidgets.xhtml unrestricted uploadEPSS 0.3%