Fallos del tipo CWE-434

3098 resultados

Upload irrestrito de arquivo com tipo perigoso

Ocorre quando a aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos. O risco é grave: o arquivo pode ser armazenado em local acessível pela web, executado pelo servidor, ou baixado e executado pela vítima.

Ejemplo

Um formulário de perfil aceita qualquer arquivo como 'foto', sem verificação. Alguém faz upload de um .exe ou .php; se salvo em pasta pública e com permissões erradas, o arquivo pode ser executado pelo servidor ou baixado por outros usuários.

Cómo mitigar

Valide a extensão e o tipo MIME no servidor (nunca apenas no cliente), rejeite extensões perigosas explicitamente, armazene uploads fora da raiz web ou sem permissão de execução, e considere renomear arquivos removendo extensão original. Idealmente, converta imagens para formatos seguros (PNG/JPG) após upload.

CVE-2025-13376HIGHProjectList <= 0.3.0 - Authenticated (Editor+) Arbitrary File UploadEPSS 0.6%CVE-2024-2058MEDIUMSourceCodester Petrol Pump Management Software product.php unrestricted uploadEPSS 0.6%CVE-2024-27957CRITICALWordPress Pie Register plugin <= 3.8.3.1 - Unauthenticated Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2025-57795CRITICALUnauthenticated Remote File Download in Explorance BlueEPSS 0.6%CVE-2024-48180CRITICALClassCMS <=4.8 is vulnerable to file inclusion in the nowView method in/class/cms/cms.php, which can include a file uploaded to the/class/teEPSS 0.6%CVE-2025-56265HIGHAn arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbiEPSS 0.6%CVE-2026-71620HIGHFile Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php fileEPSS 0.6%CVE-2024-58313HIGHxbtitFM 4.1.18 Insecure File Upload in file_hosting FeatureEPSS 0.6%CVE-2026-14553HIGHZportals < 6.3.4 - Subscriber+ Arbitrary File UploadEPSS 0.6%CVE-2025-39557CRITICALWordPress Kadence WooCommerce Email Designer plugin <= 1.5.14 - Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2024-43662MEDIUMAuthenticated arbitrary file upload to /tmp/ and /tmp/upload/EPSS 0.6%CVE-2024-2529MEDIUMMAGESH-K21 Online-College-Event-Hall-Reservation-System rooms.php unrestricted uploadEPSS 0.6%CVE-2023-7159MEDIUMgopeak MasterLab User.php update unrestricted uploadEPSS 0.6%CVE-2025-7438HIGHMasterStudy LMS – Online Courses, eLearning PRO Plus <= 4.7.9 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.6%CVE-2026-88738HIGHJazzware RT1000 Edge webUI v. 20.0.1 contains an unrestricted file upload vulnerability in the upgrade package upload functionality. An attaEPSS 0.6%CVE-2024-1921MEDIUMosuuu LightPicture Setup.php unrestricted uploadEPSS 0.6%CVE-2023-2063MEDIUMInformation disclosure, tampering, deletion and destruction vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP ModulesEPSS 0.6%CVE-2025-12682CRITICALEasy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File UploadEPSS 0.6%CVE-2024-3117MEDIUMYouDianCMS ChannelAction.class.php unrestricted uploadEPSS 0.6%CVE-2024-27964HIGHWordPress Zippy plugin <= 1.6.9 - Arbitrary File Upload vulnerabilityEPSS 0.6%