Falhas do tipo CWE-434

3.091 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2026-13158HIGHEverest Toolkit <= 1.2.3 - Admin+ Arbitrary File UploadEPSS 0.5%CVE-2026-27064CRITICALWordPress Mailster plugin <= 4.1.17 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-18933HIGHwp-downloadmanager - Unrestricted File Upload via Missing Extension/MIME Validation and Path TraversalEPSS 0.5%CVE-2026-65461CRITICALWordPress Really Simple CSV Importer plugin <= 1.3 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2024-10292MEDIUMZZCMS ChangeTable.php unrestricted uploadEPSS 0.5%CVE-2025-30996CRITICALArbitrary File Upload Vulnerability in WordPress themes by ThemifyEPSS 0.5%CVE-2026-9421MEDIUMKLiK SocialMediaWebsite File upload.inc.php uniqid unrestricted uploadEPSS 0.5%CVE-2026-78202MEDIUMitsourcecode Payroll System admin_class.php save_settings unrestricted uploadEPSS 0.5%CVE-2026-7733MEDIUMfunadmin Frontend Chunked Upload Endpoint UploadService.php chunkUpload unrestricted uploadEPSS 0.5%CVE-2026-15677MEDIUMcode-projects Online Job Portal JobSeekerInsert.php unrestricted uploadEPSS 0.5%CVE-2026-78245MEDIUMitsourcecode Online Pharmacy System User Registration register.php move_uploaded_file unrestricted uploadEPSS 0.5%CVE-2026-85208MEDIUMitsourcecode Online Medicine Delivery System Order Management Controller controller.php doInsert unrestricted uploadEPSS 0.5%CVE-2026-82607MEDIUMCozmoslabs Profile Builder Plugin Avatar Simple Upload AJAX admin-ajax.php wppb_ajax_simple_avatar unrestricted uploadEPSS 0.5%CVE-2026-86305MEDIUMlight0011 cms Upload.class.php upload unrestricted uploadEPSS 0.5%CVE-2026-2979MEDIUMFastApiAdmin Scheduled Task API controller.py user_avatar_upload_controller unrestricted uploadEPSS 0.5%CVE-2026-13553MEDIUMitsourcecode Online Hotel Management System controller.php add unrestricted uploadEPSS 0.5%CVE-2025-10425MEDIUM1000projects Online Student Project Report Submission and Evaluation System student_controller.php unrestricted uploadEPSS 0.5%CVE-2025-9476MEDIUMSourceCodester Human Resource Information System editemployee_process.php unrestricted uploadEPSS 0.5%CVE-2025-9475MEDIUMSourceCodester Human Resource Information System editemployee_process.php unrestricted uploadEPSS 0.5%CVE-2025-15158HIGHWP Enable WebP <= 1.0 - Authenticated (Author+) Arbitrary File UploadEPSS 0.5%