Fallos del tipo CWE-434

3091 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2023-3806MEDIUMSourceCodester House Rental and Property Listing System btn_functions.php unrestricted uploadEPSS 0.9%CVE-2023-1479MEDIUMSourceCodester Simple Music Player save_music.php unrestricted uploadEPSS 0.9%CVE-2023-1797MEDIUMOTCMS unrestricted uploadEPSS 0.9%CVE-2022-45527CRITICALFile upload vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows unauthorized attackers to directly upload malicEPSS 0.9%CVE-2021-23280HIGHArbitrary File uploadEPSS 0.9%CVE-2026-35174CRITICALChyrp Lite has a Path Traversal to Remote Code ExecutionEPSS 0.9%CVE-2026-27891HIGHRemote Code Execution (RCE) via Zip Slip in Plugin Upload MechanismEPSS 0.9%CVE-2022-2779MEDIUMSourceCodester Gas Agency Management System oneWord.php unrestricted uploadEPSS 0.9%CVE-2026-4883CRITICALPiotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File UploadEPSS 0.9%CVE-2026-4882CRITICALUser Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File UploadEPSS 0.9%CVE-2023-1433MEDIUMSourceCodester Gadget Works Online Ordering System Products unrestricted uploadEPSS 0.9%CVE-2024-4945MEDIUMSourceCodester Best Courier Management System view_parcel.php unrestricted uploadEPSS 0.9%CVE-2026-6960CRITICALBookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom FieldEPSS 0.9%CVE-2026-4885CRITICALPiotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File UploadEPSS 0.9%CVE-2017-9279LOWNetIQ Identity Manager allowed uploading of user icons with incorrect types or extensionsEPSS 0.9%CVE-2024-6373MEDIUMitsourcecode Online Food Ordering System addproduct.php unrestricted uploadEPSS 0.9%CVE-2024-5745MEDIUMitsourcecode Bakery Online Ordering System unrestricted uploadEPSS 0.9%CVE-2024-6084MEDIUMitsourcecode Pool of Bethesda Online Reservation System uploadImage unrestricted uploadEPSS 0.9%CVE-2024-13011CRITICALWP Foodbakery <= 4.7 - Unauthenticated Arbitrary File UploadEPSS 0.9%CVE-2023-2738MEDIUMTongda OA GatewayController.php actionGetdata unrestricted uploadEPSS 0.9%