Falhas do tipo CWE-434

3.246 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2022-44052CRITICALThe d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code eEPSS 1.4%CVE-2022-42034HIGHWedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php.EPSS 1.4%CVE-2022-23155HIGHDell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload vulnerability. A malicious user with admin privileEPSS 1.4%CVE-2024-27923HIGHRemote Code Execution by uploading a phar file using frontmatterEPSS 1.4%CVE-2024-32880CRITICALpyLoad allows upload to arbitrary folder lead to RCEEPSS 1.4%CVE-2024-31114CRITICALWordPress Shortcode Addons <= 3.2.5 - Arbitrary File Upload vulnerabilityEPSS 1.4%CVE-2024-28713CRITICALAn issue in Mblog Blog system v.3.5.0 allows an attacker to execute arbitrary code via a crafted file to the theme management feature.EPSS 1.3%CVE-2022-39305CRITICALGin-vue-admin vulnerable to Unrestricted Upload of File with Dangerous TypeEPSS 1.3%CVE-2022-42229HIGHWedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php.EPSS 1.3%CVE-2022-1837MEDIUMHome Clean Services Management System unrestricted uploadEPSS 1.3%CVE-2022-43306HIGHThe d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code eEPSS 1.3%CVE-2024-53345HIGHAn authenticated arbitrary file upload vulnerability in Car Rental Management System v1.0 to v1.3 allows attackers to execute arbitrary codeEPSS 1.3%CVE-2026-45140CRITICALChamilo LMS CStudio upload flow allows unauthenticated remote code executionEPSS 1.3%CVE-2022-50898HIGHNanoCMS 0.4 - Remote Code Execution (RCE) (Authenticated)EPSS 1.3%CVE-2022-48008CRITICALAn arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a crafted EPSS 1.3%CVE-2026-44402CRITICALVoltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgiEPSS 1.3%CVE-2020-21489CRITICALFile Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2FupdEPSS 1.3%CVE-2020-21174CRITICALFile Upload vulenrability in liufee CMS v.2.0.7.1 allows a remote attacker to execute arbitrary code via the image suffix function.EPSS 1.3%CVE-2020-20718CRITICALFile Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to tEPSS 1.3%CVE-2026-18438HIGHTemplately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename MismatchEPSS 1.3%