Fallos del tipo CWE-434

3083 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2022-48008CRITICALAn arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a crafted EPSS 1.3%CVE-2023-6827HIGHEssential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 1.3%CVE-2024-56249CRITICALWordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerabilityEPSS 1.3%CVE-2020-20067HIGHFile upload vulnerability in ebCMS v.1.1.0 allows a remote attacker to execute arbitrary code via the upload type parameter.EPSS 1.3%CVE-2020-21325HIGHAn issue in WUZHI CMS v.4.1.0 allows a remote attacker to execute arbitrary code via the set_chache method of the function\common.func.php fEPSS 1.3%CVE-2022-50939HIGHe107 CMS v3.2.1 - Upload Restriction Bypass with Path Traversal File OverrideEPSS 1.3%CVE-2026-48283CRITICALColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)EPSS 1.3%CVE-2026-48276CRITICALColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)EPSS 1.3%CVE-2021-32961HIGHMDT AutoSave Unrestricted Upload of File with Dangerous TypeEPSS 1.3%CVE-2023-22726HIGHUnrestricted file upload leading to privilege escalation in actEPSS 1.3%CVE-2020-20919HIGHFile upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary code and access sensitive information viaEPSS 1.3%CVE-2023-35808HIGHAn issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. An Unrestricted File Upload vulnerability has been idenEPSS 1.3%CVE-2021-33009HIGHmySCADA myPRO Unrestricted Upload of File with Dangerous TypeEPSS 1.3%CVE-2022-0403—Library File Manager < 5.2.3 - Subscriber+ Arbitrary File Creation/Upload/DeletionEPSS 1.3%CVE-2022-1837MEDIUMHome Clean Services Management System unrestricted uploadEPSS 1.3%CVE-2024-0783MEDIUMProject Worlds Online Admission System documents.php unrestricted uploadEPSS 1.2%CVE-2019-17325—ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrlEPSS 1.2%CVE-2024-38529CRITICALAdmidio Vulnerable to RCE via Arbitrary File Upload in Message AttachmentEPSS 1.2%CVE-2022-39036CRITICALFLOWRING Agentflow BPM - Arbitrary File UploadEPSS 1.2%CVE-2012-10036CRITICALProject Pier <= 0.8.8 Arbitrary File Upload RCEEPSS 1.2%