Fallos del tipo CWE-434

3096 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2024-27283HIGHA vulnerability was discovered in Veritas eDiscovery Platform before 10.2.5. The application administrator can upload potentially malicious EPSS 0.7%CVE-2024-8166MEDIUMRuijie EG2000K index.php unrestricted uploadEPSS 0.7%CVE-2025-4561HIGHKinfor KFOX - Arbitrary File UploadEPSS 0.7%CVE-2025-6802CRITICALMarvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-6439MEDIUMSourceCodester Home Owners Collection Management System unrestricted uploadEPSS 0.7%CVE-2025-44139HIGHEmlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=upload_zipEPSS 0.7%CVE-2024-1259MEDIUMJuanpao JPShop API AppController.php unrestricted uploadEPSS 0.7%CVE-2026-3749MEDIUMBytedesk SVG File UploadRestService.java handleFileUpload unrestricted uploadEPSS 0.7%CVE-2021-24960—WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Malicious SVGEPSS 0.7%CVE-2024-7500MEDIUMitsourcecode Airline Reservation System admin_class.php save_settings unrestricted uploadEPSS 0.7%CVE-2021-4443CRITICALWordPress Mega Menu <= 2.0.6 - Arbitrary File CreationEPSS 0.7%CVE-2024-4921MEDIUMSourceCodester Employee and Visitor Gate Pass Logging System unrestricted uploadEPSS 0.7%CVE-2024-58349CRITICALWordPress Theme Travelscape 1.0.3 Arbitrary File UploadEPSS 0.7%CVE-2025-1598MEDIUMSourceCodester Best Church Management Software asset_crud.php unrestricted uploadEPSS 0.7%CVE-2024-29661CRITICALA File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload.EPSS 0.7%CVE-2023-39307HIGHWordPress Avada theme <= 7.11.1 - Authenticated Arbitrary File Upload vulnerabilityEPSS 0.7%CVE-2024-4946MEDIUMSourceCodester Online Art Gallery Management System adminHome.php unrestricted uploadEPSS 0.7%CVE-2024-1818MEDIUMCodeAstro Membership Management System Logo unrestricted uploadEPSS 0.7%CVE-2026-18080CRITICALERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP AttachmentEPSS 0.7%CVE-2025-0702MEDIUMJoeyBling bootplus SysFileController.java unrestricted uploadEPSS 0.7%