Fallos del tipo CWE-434

3098 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2023-52221CRITICALWordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.1 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2025-54449CRITICALUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affEPSS 0.6%CVE-2023-51468CRITICALWordPress Rencontre – Dating Site Plugin <= 3.10.1 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2023-7026MEDIUMLightxun IPTV Gateway web_upload_template.html unrestricted uploadEPSS 0.6%CVE-2023-51419CRITICALWordPress BERTHA AI Plugin <= 1.11.10.7 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2024-25913CRITICALWordPress MoveTo Plugin <= 6.2 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2023-49815CRITICALWordPress WappPress plugin <= 5.0.3 - Unauthenticated Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2024-25925CRITICALWordPress WooCommerce Easy Checkout Field Editor, Fees & Discounts Plugin <= 3.5.12 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2026-15049HIGHDepicter < 4.8.0 - Editor+ Arbitrary File Upload via ZIP ImportEPSS 0.6%CVE-2024-9816MEDIUMCodezips Tourist Management System change-image.php unrestricted uploadEPSS 0.6%CVE-2024-9903MEDIUM07FLYCMS/07FLY-CMS/07FlyCRM fileUpload unrestricted uploadEPSS 0.6%CVE-2024-9815MEDIUMCodezips Tourist Management System create-package.php unrestricted uploadEPSS 0.6%CVE-2024-9855MEDIUM07FLYCMS/07FLY-CMS/07FlyCRM Module Plug-In sysmodule_1 uploadFile unrestricted uploadEPSS 0.6%CVE-2022-0499—Sermon Browser <= 0.45.22 - Arbitrary File Upload via CSRFEPSS 0.6%CVE-2024-9904MEDIUM07FLYCMS/07FLY-CMS/07FlyCRM pictureUpload unrestricted uploadEPSS 0.6%CVE-2026-41937HIGHVvveb < 1.0.8.3 Unrestricted File Upload RCE via Plugin UploadEPSS 0.6%CVE-2024-51791CRITICALWordPress Forms plugin <= 2.8.0 - Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2025-5299MEDIUMSourceCodester Client Database Management System user_order_customer_update.php unrestricted uploadEPSS 0.6%CVE-2026-84637CRITICALCalendar invitation attachments could launch local executablesEPSS 0.6%CVE-2026-54567HIGHFlask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)EPSS 0.6%