Falhas do tipo CWE-434

3.099 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2023-31428MEDIUMCLI allows upload or transfer files of dangerous typesEPSS 0.2%CVE-2026-9157HIGHRemote Code Execution in Gmission Web FAXEPSS 0.2%CVE-2026-30280MEDIUMAn arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos v1.0.135 allows attackers to ovEPSS 0.2%CVE-2025-47939MEDIUMTYPO3 CMS Vulnerable to Unrestricted File Upload in File Abstraction LayerEPSS 0.2%CVE-2026-27146HIGHGetSimple CMS: Cross-Site Request Forgery (CSRF) in File Upload Allows Arbitrary UploadsEPSS 0.2%CVE-2024-28520MEDIUMFile Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an atEPSS 0.2%CVE-2024-47151MEDIUMSome Honor products are affected by file writing vulnerability, successful exploitation could cause code executionEPSS 0.2%CVE-2025-13462LOWtarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handlingEPSS 0.2%CVE-2025-24815HIGHAn unrestricted file upload vulnerability in Nokia MantaRay NMEPSS 0.2%CVE-2026-19219HIGHDialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAXEPSS 0.2%CVE-2025-15067HIGHUnrestricted File Upload and RCE in Innorix WPEPSS 0.1%CVE-2019-25616MEDIUMAnMing MP3 CD Burner 2.0 Local Denial of ServiceEPSS 0.1%CVE-2026-12264HIGHAuthenticated File Write via HA Failover Config Upload leads to RCEEPSS —CVE-2026-54675HIGHFreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang ModuleEPSS —CVE-2026-12269HIGHAuthenticated File Write to RCE via keepalived in DDI CentralEPSS —CVE-2026-102366LOWmall4j through 4.0 Unrestricted File Upload in Admin File EndpointsEPSS —CVE-2026-102263MEDIUMmwasikz robo-cafe-rms manage-food.php unrestricted uploadEPSS —CVE-2026-96431CRITICALFlowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous TypeEPSS —CVE-2026-101071MEDIUMAcrel Electric Unet Web Service Upload Endpoint upload unrestricted uploadEPSS —