Fallos del tipo CWE-434

3091 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2026-41938HIGHVvveb < 1.0.8.2 RCE via Media Upload HandlerEPSS 1.0%CVE-2026-2354HIGHSwiss Toolkit For WP <= 1.4.6 - Authenticated (Author+) Arbitrary File Upload via upload_extension_files()EPSS 1.0%CVE-2025-1093CRITICALAIHub <= 1.3.7 - Unauthenticated Arbitrary File Upload in generate_imageEPSS 1.0%CVE-2024-0916CRITICALUnauthenticated Remote Code Execution in UvDesk CommunityEPSS 1.0%CVE-2026-23697HIGHVtiger CRM < 8.4.0 Authenticated File Upload RCE via Documents ModuleEPSS 1.0%CVE-2022-1345CRITICALStored XSS viva .svg file upload in causefx/organizrEPSS 1.0%CVE-2026-28502CRITICALWWBN AVideo: Authenticated Remote Code Execution via Unsafe Plugin ZIP ExtractionEPSS 1.0%CVE-2022-44053CRITICALThe d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential cEPSS 1.0%CVE-2025-11499CRITICALTablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.1.32 - Unauthenticated Arbitrary File UploadEPSS 1.0%CVE-2025-43946CRITICALTCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload (combined with Path Traversal).EPSS 1.0%CVE-2023-4159CRITICALUnrestricted Upload of File with Dangerous Type in omeka/omeka-sEPSS 1.0%CVE-2025-11391CRITICALPPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated Arbitrary File UploadEPSS 1.0%CVE-2026-2743CRITICALSEPPmail User Web Interface Arbitrary File Write to RCEEPSS 1.0%CVE-2012-10042HIGHSflog! CMS 1.0 Arbitrary File Upload RCEEPSS 1.0%CVE-2026-49849CRITICALxShop: Unrestricted File Upload in File Attachment Module in Admin panel leads to Arbitrary Code ExecutionEPSS 1.0%CVE-2022-42698CRITICALWordPress Api2Cart Bridge Connector plugin <= 1.1.0 - Arbitrary File Upload vulnerabilityEPSS 1.0%CVE-2022-43074CRITICALAyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php. This vulnerabiliEPSS 1.0%CVE-2023-1721CRITICALYoga Class Registration System 1.0 - RCEEPSS 1.0%CVE-2026-23636MEDIUMKiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous TypeEPSS 1.0%CVE-2023-1313HIGHUnrestricted Upload of File with Dangerous Type in cockpit-hq/cockpitEPSS 1.0%