Falhas do tipo CWE-434

3.091 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2025-32140CRITICALWordPress WP Remote Thumbnail Plugin <= 1.3.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-67243HIGHfreo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrEPSS 0.5%CVE-2023-4097HIGHMultiple vulnerabilities in IDM Sistemas QSigeEPSS 0.5%CVE-2025-65474HIGHAn arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arEPSS 0.5%CVE-2024-7277MEDIUMitsourcecode Alton Management System Add a Menu menu.php unrestricted uploadEPSS 0.5%CVE-2020-37227HIGHWordPress Plugin HS Brand Logo Slider 2.1 Unrestricted File UploadEPSS 0.5%CVE-2024-49330CRITICALWordPress Nice Backgrounds plugin <= 1.0 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2025-68910CRITICALWordPress Blogzee theme <= 1.0.5 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2025-68909CRITICALWordPress Blogistic theme <= 1.0.5 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2025-35055HIGHNewforma Info Exchange (NIX) insecure file uploadEPSS 0.5%CVE-2026-38991HIGHCockpit 2.13.5 and earlier is affected by a misconfiguration within the Bucket component _isFileTypeAllowed function where a specially craftEPSS 0.5%CVE-2025-2978MEDIUMWCMS Article Publishing Page CKEditor unrestricted uploadEPSS 0.5%CVE-2025-1862MEDIUMAuthenticated Arbitrary File Upload in Multiple WSO2 Products via BPEL Uploader SOAP Service Leading to Remote Code ExecutionEPSS 0.5%CVE-2025-39401CRITICALWordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2023-42803MEDIUMBigBlueButton Unrestricted File Upload vulnerabilityEPSS 0.5%CVE-2025-1593MEDIUMSourceCodester Best Employee Management System Profile Picture unrestricted uploadEPSS 0.5%CVE-2022-3537HIGHRole Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File UploadEPSS 0.5%CVE-2025-47559CRITICALWordPress MapSVG plugin < 8.7.4 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-86666MEDIUMaircheng-org iWebShop-5 pic.php uploadFile unrestricted uploadEPSS 0.5%CVE-2025-3324MEDIUMgodcheese/code-projects Nimrod FileRestController.java unrestricted uploadEPSS 0.5%