Falhas do tipo CWE-434

3.091 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2024-50494CRITICALWordPress Sudan Payment Gateway for WooCommerce plugin <= 1.2.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-49324CRITICALWordPress Sovratec Case Management plugin <= 1.0.0 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-50523CRITICALWordPress All Post Contact Form plugin <= 1.8.2 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-52376CRITICALWordPress Boat Rental Plugin for WordPress plugin <= 1.0.1 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-49242CRITICALWordPress Digital Lottery plugin <= 3.0.5 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2025-22782CRITICALWordPress WR Price List Manager For Woocommerce plugin <= 1.0.8 - Remote Code Execution (RCE) vulnerabilityEPSS 0.5%CVE-2024-13201MEDIUMwander-chu SpringBoot-Blog Admin Attachment AttachtController.java upload unrestricted uploadEPSS 0.5%CVE-2024-42523HIGHpubliccms V4.0.202302.e and before is vulnerable to Any File Upload via publiccms/admin/cmsTemplate/saveMetaDataEPSS 0.5%CVE-2026-53593HIGHFreeScout Vulnerable to Authenticated Remote Code Execution via incomplete upload extension denylist (.pht) — bypass of CVE-2025-48471EPSS 0.5%CVE-2025-15240HIGHQuanta Computer｜QOCA aim AI Medical Cloud Platform - Arbitrary File UploadEPSS 0.5%CVE-2026-55676HIGHMalcolm vulnerable to RCE via unrestricted .php upload to the file-upload componentEPSS 0.5%CVE-2024-6948MEDIUMGargaj wuhu Slide Editor slideeditor.php unrestricted uploadEPSS 0.5%CVE-2026-39292HIGHFalco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the pagemanager/pagebuilder module that allows EPSS 0.5%CVE-2026-76174CRITICALMultiple vulnerabilities in Ocsreports for OCS Inventory NGEPSS 0.5%CVE-2026-94383HIGHMISP Blocklist Workflow Module: Arbitrary Script Execution via Unrestricted File ExtensionEPSS 0.5%CVE-2026-10071CRITICALInterinfo｜DreamMaker - Arbitrary File UploadEPSS 0.5%CVE-2026-53599HIGHRedaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlersEPSS 0.5%CVE-2024-9036MEDIUMitsourcecode Online Bookstore admin_add.php unrestricted uploadEPSS 0.5%CVE-2025-47452CRITICALWordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload VulnerabilityEPSS 0.5%CVE-2026-63429HIGHHeyForm has unauthenticated /api/upload endpoint that accepts arbitrary files with no auth/session/form contextEPSS 0.5%