Fallos del tipo CWE-434

3083 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2026-16332MEDIUMD-Link DNS-320 multi_uploadify.php unrestricted uploadEPSS 1.4%CVE-2026-16329MEDIUMD-Link DNS-320 uploadify.php unrestricted uploadEPSS 1.4%CVE-2024-4345CRITICALStartklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File UploadEPSS 1.4%CVE-2022-0440—Catch Themes Demo Import < 2.1.1 - Admin+ Remote Code ExecutionEPSS 1.4%CVE-2023-48031CRITICALOpenSupports v4.11.0 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the comment function, an attacker can bypass securEPSS 1.4%CVE-2020-26286HIGHArbitary file uploadEPSS 1.4%CVE-2023-6316CRITICALMW WP Form <= 5.0.1 - Unauthenticated Arbitrary File UploadEPSS 1.4%CVE-2023-31541CRITICALA unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine,EPSS 1.4%CVE-2022-25277HIGHDrupal core sanitizes filenames with dangerous extensions upon upload (reference: SA-CORE-2020-012) and strips leading and trailing dots froEPSS 1.4%CVE-2024-8525CRITICALAutomated Logic WebCTRL and Carrier i-Vu Unrestricted File UploadEPSS 1.4%CVE-2022-2268—WP All Import < 3.6.8 - Admin+ Arbitrary File UploadEPSS 1.4%CVE-2022-40048HIGHFlatpress v1.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the Upload File function.EPSS 1.4%CVE-2022-0242HIGHUnrestricted Upload of File with Dangerous Type in crater-invoice/craterEPSS 1.4%CVE-2023-33508CRITICALKramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).EPSS 1.4%CVE-2024-8958HIGHUnrestricted File Write and Read in composiohq/composioEPSS 1.4%CVE-2022-38877HIGHGarage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductImage.php?id=1.EPSS 1.4%CVE-2023-29384CRITICALWordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File UploadEPSS 1.4%CVE-2024-22426HIGHDell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker couEPSS 1.4%CVE-1999-0036HIGHIRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.EPSS 1.4%CVE-2026-67206HIGHWolf CMS 0.8.3.1 Authenticated RCE via FileManagerController File UploadEPSS 1.4%