Fallos del tipo CWE-434

3091 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2022-2678MEDIUMSourceCodester Alphaware Simple E-Commerce System Background Management Page admin_feature.php unrestricted uploadEPSS 0.8%CVE-2026-40040HIGHPachno 1.0.6 Unrestricted File Upload Remote Code ExecutionEPSS 0.8%CVE-2022-2909MEDIUMSourceCodester Simple and Nice Shopping Cart Script profile.php unrestricted uploadEPSS 0.8%CVE-2026-61457MEDIUMGrav before 1.0.3 Remote Code Execution via File Upload Extension BypassEPSS 0.8%CVE-2025-2780HIGHWoffice Core <= 5.4.21 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.8%CVE-2024-10590HIGHOpt-In Downloads <= 4.07 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.8%CVE-2024-11018CRITICALGrand Vice info Webopac - Arbitrary File UploadEPSS 0.8%CVE-2024-2148MEDIUMSourceCodester Online Mobile Management Store Users.php unrestricted uploadEPSS 0.8%CVE-2023-5284MEDIUMSourceCodester Engineers Online Portal upload_save_student.php unrestricted uploadEPSS 0.8%CVE-2023-40204CRITICALWordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File UploadEPSS 0.8%CVE-2024-11661MEDIUMCodezips Free Exam Hall Seating Management System Profile Image profile.php unrestricted uploadEPSS 0.8%CVE-2023-7061HIGHAdvanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File UploadEPSS 0.8%CVE-2026-19089CRITICALProduct Input Fields for WooCommerce < 2.0.2 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2023-2419MEDIUMZhong Bang CRMEB SystemAttachmentServices.php videoUpload unrestricted uploadEPSS 0.8%CVE-2026-15039CRITICALGift Cards For WooCommerce Pro < 4.2.10 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2026-13714CRITICALRealtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code ExecutionEPSS 0.8%CVE-2026-16250CRITICALPersonal QR Message <= 1.0 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2024-28147HIGHUnrestricted Upload of Files in edu-sharingEPSS 0.8%CVE-2026-16618CRITICALImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload Leading to Remote Code ExecutionEPSS 0.8%CVE-2020-37113HIGHGUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension BypassEPSS 0.8%