Fallos del tipo CWE-434

3092 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2022-31041HIGHInsufficient content-type validation for uploaded files in open-formsEPSS 0.8%CVE-2023-34385CRITICALWordPress Export Import Menus Plugin <= 1.8.0 is vulnerable to Arbitrary File UploadEPSS 0.8%CVE-2024-6054HIGHAuto Featured Image <= 1.2 - Authenticated (Contributor+) Arbitrary File UploadEPSS 0.8%CVE-2022-33166HIGHIBM Security Directory Suite VA file uploadEPSS 0.8%CVE-2024-4927MEDIUMSourceCodester Simple Online Bidding System unrestricted uploadEPSS 0.8%CVE-2024-5853CRITICALImage Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File UploadEPSS 0.8%CVE-2026-14270HIGHExtra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) <= 2.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload in eco_save_settingsEPSS 0.8%CVE-2024-6756HIGHSocial Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File UploadEPSS 0.8%CVE-2026-5411HIGHWP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.8%CVE-2026-80237HIGHThinking Software Technology｜Efence - Arbitrary File UploadEPSS 0.8%CVE-2024-6161HIGHDefault Thumbnail Plus <= 1.0.2.3 - Authenticated (Contributor+) Arbitrary File UploadEPSS 0.8%CVE-2021-26628HIGHMaxBoard XSS and File Upload VulnerabilityEPSS 0.8%CVE-2026-6261HIGHBetheme <= 28.4 - Authenticated (Author+) Arbitrary File Upload to Remote Code Execution via Icon Pack UploadEPSS 0.8%CVE-2022-2647HIGHjeecg-boot unrestricted uploadEPSS 0.8%CVE-2026-9009HIGHCrawlomatic Multipage Scraper Post Generator <= 2.7.2 - Authenticated (Author+) Remote Code Execution via 'callback_raw' Shortcode AttributeEPSS 0.8%CVE-2026-6692HIGHSlider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber+) Arbitrary File Upload via _get_media_urlEPSS 0.8%CVE-2024-6431HIGHMedia.net Ads Manager <= 2.10.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.8%CVE-2026-78088HIGHContest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' ParameterEPSS 0.8%CVE-2023-23970CRITICALWordPress Corsa Theme <= 1.5 is vulnerable to Arbitrary File UploadEPSS 0.8%CVE-2024-8242MEDIUMMStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File UploadEPSS 0.8%