Fallos del tipo CWE-434

3256 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2025-49387CRITICALWordPress Drag and Drop File Upload for Elementor Forms Plugin <= 1.5.3 - Arbitrary File Upload VulnerabilityEPSS 1.5%CVE-2023-51590CRITICALVoltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution VulnerabilityEPSS 1.5%CVE-2022-1034CRITICALThere is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in star7th/showdocEPSS 1.5%CVE-2025-7437CRITICALEbook Store <= 5.8012 - Unauthenticated Arbitrary File UploadEPSS 1.5%CVE-2023-5185CRITICALGym Management System Project v1.0 - Insecure File UploadEPSS 1.5%CVE-2024-28105HIGHphpMyFAQ's File Upload Bypass at Category Image Leads to RCEEPSS 1.5%CVE-2022-1939—Allow SVG Files < 1.1 - Admin+ Arbitrary File UploadEPSS 1.5%CVE-2022-1273—Import WP < 2.4.6 - Admin+ Arbitrary File Upload to RCEEPSS 1.5%CVE-2021-25119—AGIL <= 1.0 - Admin+ Arbitrary File UploadEPSS 1.5%CVE-2022-1409—VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ PHP File UploadEPSS 1.5%CVE-2024-54262CRITICALWordPress Import Export For WooCommerce plugin <= 1.6.2 - Arbitrary File Upload vulnerabilityEPSS 1.5%CVE-2022-38877HIGHGarage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductImage.php?id=1.EPSS 1.5%CVE-2022-0687—Amelia < 1.0.46 - Manager+ RCEEPSS 1.5%CVE-2022-0242HIGHUnrestricted Upload of File with Dangerous Type in crater-invoice/craterEPSS 1.5%CVE-2024-27311MEDIUMArbitrary file writingEPSS 1.5%CVE-2023-40050CRITICALAutomate Vulnerable to Malicious Content Uploaded Through Embedded Compliance ApplicationEPSS 1.5%CVE-2024-11617CRITICALEnvolve Plugin <= 1.0 - Unauthenticated Arbitrary File Upload via language_file and fonts_fileEPSS 1.5%CVE-2024-37762CRITICALMachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution.EPSS 1.5%CVE-2024-4345CRITICALStartklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File UploadEPSS 1.5%CVE-2020-22151—Permissions vulnerability in Fuel-CMS v.1.4.6 allows a remote attacker to execute arbitrary code via a crafted zip file to the assests paramEPSS 1.5%