Falhas do tipo CWE-434

3.246 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2023-1713HIGHBitrix24 Remote Command Execution (RCE) via Insecure Temporary File CreationEPSS 1.6%CVE-2024-3022HIGHBookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.87 - Authenticated (Admin+) Arbitrary File UploadEPSS 1.6%CVE-2024-4033HIGHAll-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured imageEPSS 1.6%CVE-2026-26975HIGHMusic Assistant Server Path Traversal in Playlist Update API Allows Remote Code ExecutionEPSS 1.6%CVE-2022-3076HIGHCM Download Manager < 2.8.6 - Admin+ Arbitrary File UploadEPSS 1.6%CVE-2012-10042HIGHSflog! CMS 1.0 Arbitrary File Upload RCEEPSS 1.5%CVE-2025-5243CRITICALArbitrary File Upload in SMG Software's Information PortalEPSS 1.5%CVE-2026-32985CRITICALXerte Online Toolkits <= 3.14 Unauthenticated Template Import Arbitrary File Upload Leading to Remote Code ExecutionEPSS 1.5%CVE-2023-6635HIGHEditorsKit <= 1.40.3 - Authenticated (Administrator+) Arbitrary File UploadEPSS 1.5%CVE-2023-39462MEDIUMTriangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload VulnerabilityEPSS 1.5%CVE-2025-68109CRITICALChurchCRM vulnerable to RCE with database restore functionalityEPSS 1.5%CVE-2023-25654CRITICALbaserCMS File Uploader Remote Code Execution (RCE) vulnerabilityEPSS 1.5%CVE-2023-38887HIGHFile Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive inEPSS 1.5%CVE-2014-125113CRITICALDell/Quest KACE K1000 Unauthenticated File Upload RCEEPSS 1.5%CVE-2025-55912HIGHAn issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php tEPSS 1.5%CVE-2024-43656CRITICALA backup can be manipulated and then restored to create arbitrary files inside the <redacted> directory. A CGI script can be added to the web directory this way, allowing for full remote code execution.EPSS 1.5%CVE-2024-23630CRITICALMotorola MR2600 Arbitrary Firmware Upload VulnerabilityEPSS 1.5%CVE-2021-4080HIGHUnrestricted Upload of File with Dangerous Type in crater-invoice/craterEPSS 1.5%CVE-2022-50973CRITICALYonyou KSOA 9.0 Unauthenticated File Upload RCE via ImageUpload ServletEPSS 1.5%CVE-2023-31857CRITICALSourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerabilityEPSS 1.5%