Falhas do tipo CWE-434

3.096 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2025-9153MEDIUMitsourcecode Online Tour and Travel Management System travellers.php unrestricted uploadEPSS 0.4%CVE-2025-68553CRITICALWordPress Lendiz theme < 2.0.1 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2026-9067CRITICALSchema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media UploadEPSS 0.4%CVE-2025-20376MEDIUMCisco Unified Contact Center Express Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-2334MEDIUMTemplate Kit – Import <= 1.0.14 - Authenticated(Author+) Stored Cross-Site Scripting via template uploadEPSS 0.4%CVE-2026-84750MEDIUMUltimate Addons for Contact Form 7 3.2.4 - 3.5.50 - Unauthenticated Arbitrary File Upload via Signature FieldEPSS 0.4%CVE-2025-11508MEDIUMcode-projects Voting System voters_add.php unrestricted uploadEPSS 0.4%CVE-2026-61900CRITICALJoomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6EPSS 0.4%CVE-2025-63678LOWAn authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attEPSS 0.4%CVE-2026-61424CRITICALJoomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2EPSS 0.4%CVE-2018-25162HIGH2-Plan Team 1.0.4 Arbitrary File Upload via managefile.phpEPSS 0.4%CVE-2026-33560HIGHDaktronics Controller Firmware Unrestricted Upload of File with Dangerous TypeEPSS 0.4%CVE-2025-3566MEDIUMveal98 小牛肉 Echo 开源社区系统 uploadMdPic unrestricted uploadEPSS 0.4%CVE-2026-2133MEDIUMcode-projects Online Music Site AdminUpdateCategory.php unrestricted uploadEPSS 0.4%CVE-2025-47550MEDIUMWordPress Instantio plugin <= 3.3.16 - Arbitrary File Upload VulnerabilityEPSS 0.4%CVE-2024-5050MEDIUMWangshen SecGate 3600 ?g=log_import_save unrestricted uploadEPSS 0.4%CVE-2025-2952MEDIUMBluestar Micro Mall api.php unrestricted uploadEPSS 0.4%CVE-2024-28418MEDIUMWebedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/we_cmd.phpEPSS 0.4%CVE-2025-43766MEDIUMThe Liferay Portal 7.4.0 through 7.3.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1EPSS 0.4%CVE-2026-24769HIGHNocoDB Vulnerable to Stored Cross-Site Scripting via SVG uploadEPSS 0.4%