Fallos del tipo CWE-434

3091 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2025-20354CRITICALCisco Unified Contact Center Express Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-46157CRITICALAn issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave requesEPSS 0.9%CVE-2020-37084HIGHSchool ERP Pro 1.0 Admin Profile Photo Upload Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-1328MEDIUMGuizhou 115cms index unrestricted uploadEPSS 0.9%CVE-2021-34076HIGHFile Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges via crafted zip file EPSS 0.9%CVE-2021-47757HIGHChikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)EPSS 0.9%CVE-2022-43436HIGHHWA JIUH DIGITAL TECHNOLOGY LTD. EasyTest - Arbitrary File UploadEPSS 0.9%CVE-2024-12853HIGHModula Image Gallery <= 2.11.10 - Authenticated (Author+) Arbitrary File UploadEPSS 0.9%CVE-2026-37748HIGHVisitor Management System 1.0 by sanjay1313 is vulnerable to Unrestricted File Upload in vms/php/admin_user_insert.php and vms/php/update_1.EPSS 0.9%CVE-2023-28699HIGHWADE DIGITAL DESIGN CO, LTD. FANTSY - Arbitrary File UploadEPSS 0.9%CVE-2026-49827CRITICALWebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan_file (CWE-434)EPSS 0.9%CVE-2023-1744MEDIUMIBOS htaccess unrestricted uploadEPSS 0.9%CVE-2024-31286CRITICALWordPress WP Photo Album Plus plugin < 8.6.03.005 - Arbitrary File Upload vulnerabilityEPSS 0.9%CVE-2025-10647HIGHEmbed PDF for WPForms <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.9%CVE-2023-50922HIGHAn issue was discovered on GL.iNet devices through 4.5.0. Attackers who are able to steal the AdminToken cookie can execute arbitrary code bEPSS 0.9%CVE-2022-44401CRITICALOnline Tours & Travels Management System v1.0 contains an arbitrary file upload vulnerability via /tour/admin/file.php.EPSS 0.9%CVE-2026-88738HIGHJazzware RT1000 Edge webUI v. 20.0.1 contains an unrestricted file upload vulnerability in the upgrade package upload functionality. An attaEPSS 0.9%CVE-2020-22539HIGHAn arbitrary file upload vulnerability in the Add Category function of Codoforum v4.9 allows attackers to execute arbitrary code via uploadiEPSS 0.9%CVE-2015-0796MEDIUMopen build service source server symlink exploitation via source patchEPSS 0.9%CVE-2024-8615CRITICALWP JobSearch <= 2.6.7 - Unauthenticated Arbitrary File UploadEPSS 0.9%