Falhas do tipo CWE-434

3.082 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2025-0520CRITICALShowDoc < 2.8.7 Unauthenticated File Upload Remote Code ExecutionEPSS 2.6%CVE-2024-11138MEDIUMDedeCMS friendlink_add.php unrestricted uploadEPSS 2.6%CVE-2021-26918CRITICALThe ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of the "Send an image when a userEPSS 2.6%CVE-2024-32700CRITICALWordPress Kognetiks Chatbot for WordPress plugin <= 2.0.0 - Arbitrary File Upload vulnerabilityEPSS 2.6%CVE-2017-16594—This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.7EPSS 2.6%CVE-2023-3187MEDIUMPHPGurukul Teachers Record Management System Profile Picture changeimage.php unrestricted uploadEPSS 2.6%CVE-2019-10959—BD Alaris Gateway Workstation Versions, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.2 Build 15, 1.3.0 Build 14, 1.3.1 Build 13, This does not impacEPSS 2.5%CVE-2022-2180—GREYD.SUITE < 1.2.7 - Unauthenticated File Upload to RCEEPSS 2.5%CVE-2025-3616HIGHGreenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 2.5%CVE-2023-4121MEDIUMByzoro Smart S85F Management Platform unrestricted uploadEPSS 2.5%CVE-2024-4964MEDIUMD-Link DAR-7000-40 urlblist.php unrestricted uploadEPSS 2.5%CVE-2024-4962MEDIUMD-Link DAR-7000-40 resmanage.php unrestricted uploadEPSS 2.5%CVE-2024-22393CRITICALApache Answer: Pixel Flood Attack by uploading the large pixel fileEPSS 2.5%CVE-2023-4226HIGHChamilo LMS File Upload Functionality Remote Code ExecutionEPSS 2.5%CVE-2021-42839HIGHGrand Vice info Co. webopac7 - Arbitrary File UploadEPSS 2.4%CVE-2025-34121CRITICALIdera Up.Time ≤ 7.2 post2file.php Arbitrary File Upload RCEEPSS 2.4%CVE-2021-24222—WP-Curricul Vitea Free <= 6.3 - Unauthenticated Arbitrary File Upload to RCEEPSS 2.4%CVE-2021-35963CRITICALLearningdigital.com, Inc. Orca HCM - Unrestricted Upload of File with Dangerous TypeEPSS 2.4%CVE-2020-7569—A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 thatEPSS 2.4%CVE-2026-32475CRITICALWordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerabilityEPSS 2.4%