Fallos del tipo CWE-434

3091 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2023-1415MEDIUMSimple Art Gallery adminHome.php sliderPicSubmit unrestricted uploadEPSS 1.0%CVE-2026-15965HIGHMaxUpload <= 1.4.0 - Unauthenticated Arbitrary File Upload via 'resumableFilename' ParameterEPSS 1.0%CVE-2022-47042HIGHMCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do.EPSS 1.0%CVE-2026-61524HIGHWebsiteBaker CMS < 2.13.10 File Upload RCE via Module InstallationEPSS 1.0%CVE-2024-4397HIGHLearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Instructor+) Arbitrary File UploadEPSS 1.0%CVE-2023-30613HIGHKiwi TCMS unrestricted file upload vulnerabilityEPSS 1.0%CVE-2023-38029CRITICALSaho ADM100&ADM-100FP - Arbitrary File UploadEPSS 1.0%CVE-2023-5860HIGHIcons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File UploadEPSS 1.0%CVE-2025-9846CRITICALUnrestricted File Upload in TaletSys Inka.NetEPSS 1.0%CVE-2023-47621HIGHRemote code execution via file uploads in guest-entries EPSS 1.0%CVE-2026-29041HIGHChamilo: Authenticated Remote Code Execution via Unrestricted File UploadEPSS 1.0%CVE-2024-3912CRITICALASUS Router - Upload arbitrary firmwareEPSS 1.0%CVE-2022-2883HIGHIn affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of ServiceEPSS 1.0%CVE-2024-4389HIGHSlider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File UploadEPSS 1.0%CVE-2024-58282HIGHSerendipity 2.5.0 Remote Code Execution via Authenticated Media UploadEPSS 1.0%CVE-2024-50510CRITICALWordPress AR For Woocommerce plugin <= 6.3 - Arbitrary File Upload vulnerabilityEPSS 1.0%CVE-2012-10056HIGHPHP Volunteer Management System 1.0.2 Arbitrary File UploadEPSS 1.0%CVE-2023-23328HIGHA File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileUpload.php by uploadiEPSS 1.0%CVE-2023-0670HIGHUlearn version a5a7ca20de859051ea0470542844980a66dfc05d allows an attacker with administrator permissions to obtain remote code execution onEPSS 1.0%CVE-2023-53933HIGHSerendipity 2.4.0 Authenticated Remote Code Execution via File UploadEPSS 1.0%