Falhas do tipo CWE-434

3.096 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2026-13248HIGHAuthenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command InterfaceEPSS 0.4%CVE-2025-31916CRITICALWordPress JP Students Result Management System Premium plugin 1.1.7 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2024-36396HIGHVerint - CWE-434: Unrestricted Upload of File with Dangerous TypeEPSS 0.4%CVE-2025-66250CRITICALUnauthenticated Arbitrary File Upload (status_contents.php)EPSS 0.4%CVE-2025-47687CRITICALWordPress StoreKeeper for WooCommerce plugin <= 14.4.4 - Arbitrary File Upload VulnerabilityEPSS 0.4%CVE-2024-13138MEDIUMwangl1989 mysiteforme LocalUploadServiceImpl upload unrestricted uploadEPSS 0.4%CVE-2025-66256CRITICALUnauthenticated Arbitrary File Upload (patch_contents.php)EPSS 0.4%CVE-2025-54677CRITICALWordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.5.3 - Arbitrary File Upload VulnerabilityEPSS 0.4%CVE-2023-6551MEDIUMStored XSS in class.upload.phpEPSS 0.4%CVE-2025-12222MEDIUMBdtask Flight Booking Software Deposit deposit unrestricted uploadEPSS 0.4%CVE-2025-66908MEDIUMTurms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an improper file type validation vulnerability in the OCR image upload functioEPSS 0.4%CVE-2026-58654MEDIUMGrav - Arbitrary File Upload via Avatar EndpointEPSS 0.4%CVE-2026-78078HIGHJoomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10EPSS 0.4%CVE-2025-32652CRITICALWordPress Solace Extra plugin <= 1.3.1 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2025-46264CRITICALWordPress PowerPress Podcasting <= 11.12.5 - Arbitrary File Upload VulnerabilityEPSS 0.4%CVE-2024-57407HIGHAn arbitrary file upload vulnerability in the component /userPicture of Timo v2.0.3 allows attackers to execute arbitrary code via uploadingEPSS 0.4%CVE-2026-84063HIGHBurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited,EPSS 0.4%CVE-2024-47319HIGHWordPress Bit Form plugin <= 2.13.10 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2025-8775MEDIUMQiyuesuo Eelectronic Signature Platform Scheduled Task upload execute unrestricted uploadEPSS 0.4%CVE-2026-46489HIGHSolidInvoice: Unrestricted file upload with no MIME validation allows stored XSS via malicious SVG logoEPSS 0.4%