Fallos del tipo CWE-434

3084 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2023-39970—Extension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.0EPSS 1.1%CVE-2022-43306HIGHThe d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code eEPSS 1.1%CVE-2022-41533HIGHOnline Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/EPSS 1.0%CVE-2024-43249CRITICALWordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerabilityEPSS 1.0%CVE-2022-4506HIGHUnrestricted Upload of File with Dangerous Type in openemr/openemrEPSS 1.0%CVE-2023-4186MEDIUMSourceCodester Pharmacy Management System manage_website.php unrestricted uploadEPSS 1.0%CVE-2023-22851HIGHTiki before 24.2 allows lib/importer/tikiimporter_blog_wordpress.php PHP Object Injection by an admin because of an unserialize call.EPSS 1.0%CVE-2024-49607CRITICALWordPress WP Dropbox Dropins plugin <= 1.0 - Arbitrary File Upload vulnerabilityEPSS 1.0%CVE-2024-2690MEDIUMSourceCodester Online Discussion Forum Site uupdate.php unrestricted uploadEPSS 1.0%CVE-2022-32177CRITICALGin-vue-admin - Unrestricted File UploadEPSS 1.0%CVE-2022-32176CRITICALGin-vue-admin - Unrestricted File UploadEPSS 1.0%CVE-2023-5965MEDIUMUnrestricted Upload of File with Dangerous Type in EspoCRMEPSS 1.0%CVE-2023-5966MEDIUMUnrestricted Upload of File with Dangerous Type in EspoCRMEPSS 1.0%CVE-2022-37346CRITICALEC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient verification vulnerability when uploading files. EPSS 1.0%CVE-2017-20224CRITICALTelesquare SKT LTE Router SDT-CS3B1 WebDAV Arbitrary File UploadEPSS 1.0%CVE-2022-40217MEDIUMWordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Edit/Upload vulnerabilityEPSS 1.0%CVE-2024-50427CRITICALWordPress SurveyJS plugin <= 1.9.136 - Arbitrary File Upload vulnerabilityEPSS 1.0%CVE-2024-4349HIGHSourceCodester Pisay Online E-Learning System controller.php unrestricted uploadEPSS 1.0%CVE-2023-35189CRITICALIagona ScrutisWeb Unrestricted Upload of File with Dangerous TypeEPSS 1.0%CVE-2024-0800HIGHAuthentication Bypass via wizardLogin in Arcserve Unified Data ProtectionEPSS 1.0%