Falhas do tipo CWE-434

3.092 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2024-35767CRITICALWordPress Squeeze plugin <= 1.4 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-53724LOWParse Server: Stored XSS via trailing-dot filename bypassing file upload extension blocklistEPSS 0.5%CVE-2026-28674HIGHxiaoheiFS Vulnerable to RCE via Arbitrary Payment Plugin Upload (Automatic Execution)EPSS 0.5%CVE-2025-4259MEDIUMnewbee-mall UploadController.java upload unrestricted uploadEPSS 0.5%CVE-2025-45997HIGHSourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability. An attacker can upload a PHP file disguisEPSS 0.5%CVE-2025-4923MEDIUMSourceCodester Client Database Management System user_delivery_update.php unrestricted uploadEPSS 0.5%CVE-2024-13210MEDIUMdonglight bookstore电商书城系统说明 AdminBookController. java uploadPicture unrestricted uploadEPSS 0.5%CVE-2026-81931MEDIUMUnrestricted upload of file with dangerous type in Prospero Flow CRM product photo allows stored cross-site scriptingEPSS 0.5%CVE-2025-1890MEDIUMshishuocms ManageUpLoadAction.java handleRequest unrestricted uploadEPSS 0.5%CVE-2026-3800MEDIUMSourceCodester/janobe Resort Reservation System controller.php doInsert unrestricted uploadEPSS 0.5%CVE-2025-22504CRITICALWordPress 4ECPS Web Forms Plugin <= 0.2.18 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2020-36973HIGHPDW File Browser 1.3 - Remote Code ExecutionEPSS 0.5%CVE-2023-40460HIGHImproper input leads to DoSEPSS 0.5%CVE-2025-26325CRITICALShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php.EPSS 0.5%CVE-2025-22213HIGH[20250301] - Core - Malicious file uploads via Media ManagerEPSS 0.5%CVE-2024-57761HIGHAn arbitrary file upload vulnerability in the parserXML() method of JeeWMS before v2025.01.01 allows attackers to execute arbitrary code viaEPSS 0.5%CVE-2024-53982HIGHArbitrary file download in Zoo-Project Echo ExampleEPSS 0.5%CVE-2026-42844HIGHGrav: Low-privileged API users can create super-admin accounts via blueprint-uploadEPSS 0.5%CVE-2026-2164MEDIUMdetronetdip E-commerce addadhar.php unrestricted uploadEPSS 0.5%CVE-2026-39591CRITICALWordPress WP-BusinessDirectory plugin <= 4.0.0 - Arbitrary File Upload vulnerabilityEPSS 0.5%