Fallos del tipo CWE-434

3097 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2024-7904MEDIUMDedeBIZ File Extension file_manage_control.php unrestricted uploadEPSS 0.7%CVE-2024-9794MEDIUMCodezips Online Shopping Portal update-image1.php unrestricted uploadEPSS 0.7%CVE-2025-1818MEDIUMzj1983 zz ZfileAction.upload unrestricted uploadEPSS 0.7%CVE-2026-54414CRITICALFileRise shared-folder upload path traversal allows arbitrary file write and admin takeoverEPSS 0.7%CVE-2026-54611MEDIUMInstantCMS has Remote Code Execution in package installerEPSS 0.7%CVE-2024-29135CRITICALWordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerabilityEPSS 0.7%CVE-2023-45197CRITICALAdminer and AdminerEvo vulnerable to directory traversal and file uploadEPSS 0.7%CVE-2024-11214MEDIUMSourceCodester Best Employee Management System profile.php unrestricted uploadEPSS 0.7%CVE-2025-23953CRITICALWordPress user files plugin <= 2.4.2 - Arbitrary File Upload vulnerabilityEPSS 0.7%CVE-2025-6057HIGHWPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.7%CVE-2026-3748MEDIUMBytedesk SVG File UploadRestController.java uploadFile unrestricted uploadEPSS 0.7%CVE-2024-40545HIGHAn arbitrary file upload vulnerability in the component /admin/cmsWebFile/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arEPSS 0.7%CVE-2018-25436CRITICALWordPress Plugin Baggage Freight Shipping Australia 0.1.0 Arbitrary File UploadEPSS 0.7%CVE-2025-12957HIGHAll-in-One Video Gallery <= 4.5.7 - Authenticated (Author+) Arbitrary File Upload via VTT Upload BypassEPSS 0.7%CVE-2026-36669CRITICALAn unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote attackers to upload EPSS 0.7%CVE-2024-7905MEDIUMDedeBIZ archives_do.php AdminUpload unrestricted uploadEPSS 0.7%CVE-2025-48889MEDIUMGradio Allows Unauthorized File Copy via Path ManipulationEPSS 0.7%CVE-2025-29394HIGHAn insecure permissions vulnerability in verydows v2.0 allows a remote attacker to execute arbitrary code by uploading a file type.EPSS 0.7%CVE-2025-32118CRITICALWordPress CMP – Coming Soon & Maintenance plugin <= 4.1.14 - Remote Code Execution (RCE) vulnerabilityEPSS 0.7%CVE-2025-31002CRITICALWordPress Squeeze plugin <= 1.6 - Arbitrary File Upload vulnerabilityEPSS 0.7%