Fallos del tipo CWE-434

3096 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2025-0702MEDIUMJoeyBling bootplus SysFileController.java unrestricted uploadEPSS 0.7%CVE-2026-18080CRITICALERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP AttachmentEPSS 0.7%CVE-2025-6207HIGHWP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.7%CVE-2026-53691HIGHRemote Code Execution in Redeight CMSEPSS 0.7%CVE-2023-29631CRITICALPrestaShop jmsslider 1.6.0 is vulnerable to Incorrect Access Control via ajax_jmsslider.php.EPSS 0.7%CVE-2026-94104HIGHNivoCart through 2.4.0 Arbitrary File Upload RCE via filemanagerEPSS 0.7%CVE-2024-0648HIGHYunyou CMS Common.php unrestricted uploadEPSS 0.7%CVE-2024-0643CRITICALUnrestricted upload of dangerous file types in C21 Live Encoder and Live MosaicEPSS 0.7%CVE-2025-55454HIGHAn authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrarEPSS 0.7%CVE-2025-12974HIGHGravity Forms <= 2.9.21.1 - Unauthenticated Arbitrary File Upload via Legacy Chunked UploadEPSS 0.7%CVE-2025-46001CRITICALAn arbitrary file upload vulnerability in the is_allowed_file_type() function of Filemanager v2.3.0 allows attackers to execute arbitrary coEPSS 0.7%CVE-2021-3906MEDIUMUnrestricted Upload of File with Dangerous Type in bookstackapp/bookstackEPSS 0.7%CVE-2024-30510CRITICALWordPress Salon booking system plugin <= 9.5 - Arbitrary File Upload vulnerabilityEPSS 0.7%CVE-2024-40549HIGHAn arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute EPSS 0.7%CVE-2024-40548HIGHAn arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0.202302.e allows attackers to execute arbitEPSS 0.7%CVE-2024-54370CRITICALWordPress Video & Photo Gallery for Ultimate Member plugin <= 1.1.0 - Arbitrary File Upload vulnerabilityEPSS 0.7%CVE-2024-7904MEDIUMDedeBIZ File Extension file_manage_control.php unrestricted uploadEPSS 0.7%CVE-2024-6280MEDIUMSourceCodester Simple Online Bidding System unrestricted uploadEPSS 0.7%CVE-2025-10747HIGHWP-DownloadManager <= 1.68.11 - Authenticated (Admin+) Arbitrary File UploadEPSS 0.7%CVE-2024-58283HIGHWBCE CMS 1.6.2 Remote Code Execution via Elfinder File UploadEPSS 0.7%