Fallos del tipo CWE-434

3093 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2026-29859CRITICALAn arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file.EPSS 0.8%CVE-2026-48062CRITICALCodeIgniter: Uploaded file extension validation bypass in `ext_in` ruleEPSS 0.8%CVE-2024-25674CRITICALAn issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and EPSS 0.8%CVE-2022-50993CRITICALWeaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServletEPSS 0.8%CVE-2023-1561MEDIUMcode-projects Simple Online Hotel Reservation System add_room.php unrestricted uploadEPSS 0.8%CVE-2024-53822CRITICALWordPress Pie Register Premium plugin < 3.8.3.3 - Arbitrary File Upload vulnerabilityEPSS 0.8%CVE-2023-53956HIGHFlatnux 2021-03.25 Authenticated File Upload Remote Code ExecutionEPSS 0.8%CVE-2025-69981HIGHFUXA v1.2.7 contains an Unrestricted File Upload vulnerability in the `/api/upload` API endpoint. The endpoint lacks authentication mechanisEPSS 0.8%CVE-2023-51925CRITICALAn arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 alloEPSS 0.8%CVE-2023-51928CRITICALAn arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 alloEPSS 0.8%CVE-2024-1116HIGHopenBI Upload.php index unrestricted uploadEPSS 0.8%CVE-2023-51924CRITICALAn arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to executeEPSS 0.8%CVE-2024-8170MEDIUMSourceCodester Zipped Folder Manager App add-folder.php unrestricted uploadEPSS 0.8%CVE-2024-22895HIGHDedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php.EPSS 0.8%CVE-2024-11017HIGHGrand Vice info Webopac - Arbitrary File UploadEPSS 0.8%CVE-2025-56704HIGHLeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded filesEPSS 0.8%CVE-2024-3705HIGHUnrestricted Upload of File with Dangerous Type vulnerability in OpenGnsysEPSS 0.8%CVE-2024-40071CRITICALSourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_generator/classes/SystEPSS 0.8%CVE-2021-47753CRITICALphpKF CMS 3.00 Beta y6 - Remote Code Execution (RCE) (Unauthenticated)EPSS 0.8%CVE-2024-1034HIGHopenBI File.php uploadFile unrestricted uploadEPSS 0.8%