Falhas do tipo CWE-434

3.246 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2022-1519CRITICALLRM does not restrict the types of files that can be uploaded to the affected product. A malicious actor can upload any file type, includingEPSS 1.4%CVE-2022-41539HIGHWedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /admin/users_add.php. This vulnerabilEPSS 1.4%CVE-1999-0036HIGHIRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.EPSS 1.4%CVE-2025-55746CRITICALDirectus allows unauthenticated file upload and file modification due to lacking input sanitizationEPSS 1.4%CVE-2024-9920MEDIUMUnrestricted File Upload and Execution in parisneo/lollms-webuiEPSS 1.4%CVE-2022-41504HIGHAn arbitrary file upload vulnerability in the component /php_action/editProductImage.php of Billing System Project v1.0 allows attackers to EPSS 1.4%CVE-2024-10578HIGHPubnews <= 1.0.7 - Authenticated (Subscriber+) Arbitrary Plugin InstallationEPSS 1.4%CVE-2026-14345CRITICALWPFunnels <= 3.12.7 - Unauthenticated Remote Code Execution via 'postData' ParameterEPSS 1.4%CVE-2023-6220HIGHPiotnet Forms <= 1.0.28 - Unauthenticated Arbitrary File UploadEPSS 1.4%CVE-2022-39977HIGHOnline Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the User module. ThEPSS 1.4%CVE-2022-43083HIGHAn arbitrary file upload vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary code viEPSS 1.4%CVE-2022-39978HIGHOnline Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the Product List moEPSS 1.4%CVE-2024-52375CRITICALWordPress Datasets Manager by Arttia Creative plugin <= 1.5 - Arbitrary File Upload vulnerabilityEPSS 1.4%CVE-2024-11313CRITICALTRCore DVC - Arbitrary File Upload through Path TraversalEPSS 1.4%CVE-2024-11312CRITICALTRCore DVC - Arbitrary File Upload through Path TraversalEPSS 1.4%CVE-2024-11314CRITICALTRCore DVC - Arbitrary File Upload through Path TraversalEPSS 1.4%CVE-2022-44051CRITICALThe d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code eEPSS 1.4%CVE-2022-44048CRITICALThe d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code exEPSS 1.4%CVE-2022-44049CRITICALThe d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code EPSS 1.4%CVE-2024-11315CRITICALTRCore DVC - Arbitrary File Upload through Path TraversalEPSS 1.4%