Fallos del tipo CWE-434

3091 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2022-48006CRITICALAn arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerabilitEPSS 0.9%CVE-2022-50916HIGHe107 CMS v3.2.1 - Upload restriction bypass (Authenticated [Admin])+ Server file overrideEPSS 0.9%CVE-2023-53889HIGHPerch CMS 3.2 Remote Code Execution via Unrestricted File UploadEPSS 0.9%CVE-2025-12973HIGHS2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.8 - Authenticated (Editor+) Arbitrary File UploadEPSS 0.9%CVE-2023-53885HIGHWebutler v3.2 Remote Code Execution via Arbitrary File UploadEPSS 0.9%CVE-2023-1442MEDIUMMeizhou Qingyunke QYKCMS Update api.php unrestricted uploadEPSS 0.9%CVE-2026-54177MEDIUMbackpack/crud: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of `shell.php` reach the webserverEPSS 0.9%CVE-2024-7484HIGHCRM Perks Forms <= 1.1.3 - Authenticated (Administrator+) Arbitrary File UploadEPSS 0.9%CVE-2023-37289CRITICALInfoDoc Document On-line Submission and Approval System - Arbitrary File UploadEPSS 0.9%CVE-2023-32753CRITICALITPison OMICARD EDM - Arbitrary File UploadEPSS 0.9%CVE-2023-32757CRITICALe-Excellence U-Office Force - Arbitrary File UploadEPSS 0.9%CVE-2016-15046HIGHHanwha Techwin SSM 1.32 & 1.4 ActiveMQ File Upload RCEEPSS 0.9%CVE-2022-1033HIGHUnrestricted Upload of File with Dangerous Type in crater-invoice/craterEPSS 0.9%CVE-2020-22755HIGHFile upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVEEPSS 0.9%CVE-2024-54918CRITICALKashipara E-learning Management System v1.0 is vulnerable to Remote Code Execution via File Upload in /teacher_avatar.php.EPSS 0.9%CVE-2025-3054HIGHWP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.9%CVE-2026-75865CRITICALWPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST EndpointEPSS 0.9%CVE-2024-1527CRITICALUnrestricted Upload of File with Dangerous Type in CMS Made SimpleEPSS 0.9%CVE-2024-45171HIGHAn issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to upload dangEPSS 0.9%CVE-2025-25784CRITICALAn arbitrary file upload vulnerability in the component \c\TemplateController.php of Jizhicms v2.5.4 allows attackers to execute arbitrary cEPSS 0.9%