Falhas do tipo CWE-434

3.246 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2022-2111CRITICALUnrestricted Upload of File with Dangerous Type in inventree/inventreeEPSS 1.3%CVE-2020-20919HIGHFile upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary code and access sensitive information viaEPSS 1.3%CVE-2023-35808HIGHAn issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. An Unrestricted File Upload vulnerability has been idenEPSS 1.3%CVE-2024-56249CRITICALWordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerabilityEPSS 1.3%CVE-2026-14282CRITICALGoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload FieldEPSS 1.3%CVE-2022-0403—Library File Manager < 5.2.3 - Subscriber+ Arbitrary File Creation/Upload/DeletionEPSS 1.3%CVE-2025-6085HIGHMake Connector <= 1.5.10 - Authenticated (Administrator+) Arbitrary File UploadEPSS 1.3%CVE-2022-43050HIGHOnline Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component update_profiEPSS 1.3%CVE-2024-0783MEDIUMProject Worlds Online Admission System documents.php unrestricted uploadEPSS 1.2%CVE-2019-17325—ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrlEPSS 1.2%CVE-2022-50907HIGHe107 CMS v3.2.1 - Admin Upload Restriction Bypass + RCEEPSS 1.2%CVE-2022-41573CRITICALAn issue was discovered in Ovidentia 8.3. The file upload feature does not prevent the uploading of executable files. A user can upload a .pEPSS 1.2%CVE-2024-38529CRITICALAdmidio Vulnerable to RCE via Arbitrary File Upload in Message AttachmentEPSS 1.2%CVE-2022-43061HIGHOnline Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /operations/EPSS 1.2%CVE-2022-43277HIGHCanteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ip/youthappam/php_action/editFile.php. TEPSS 1.2%CVE-2022-43275HIGHCanteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/php_action/editProductImage.EPSS 1.2%CVE-2024-3521MEDIUMByzoro Smart S80 Management Platform userattestation.php unrestricted uploadEPSS 1.2%CVE-2023-39463HIGHTriangle MicroWorks SCADA Data Gateway Trusted Certification Unrestricted Upload of File Remote Code Execution VulnerabilityEPSS 1.2%CVE-2022-46135HIGHIn AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload websheEPSS 1.2%CVE-2025-2008HIGHImport Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 1.2%