Falhas do tipo CWE-434

3.083 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2012-10049CRITICALWebPageTest Arbitrary PHP File Upload RCEEPSS 1.1%CVE-2022-41504HIGHAn arbitrary file upload vulnerability in the component /php_action/editProductImage.php of Billing System Project v1.0 allows attackers to EPSS 1.1%CVE-2022-50912CRITICALImpressCMS 1.4.4 - Unrestricted File UploadEPSS 1.1%CVE-2012-10045CRITICALXODA 0.4.5 Arbitrary PHP File UploadEPSS 1.1%CVE-2022-39305CRITICALGin-vue-admin vulnerable to Unrestricted Upload of File with Dangerous TypeEPSS 1.1%CVE-2022-43231HIGHCanteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/manage_website.php. This vulEPSS 1.1%CVE-2023-29721CRITICALSofaWiki <= 3.8.9 has a file upload vulnerability that leads to command execution.EPSS 1.1%CVE-2024-1567HIGHRoyal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File UploadEPSS 1.1%CVE-2023-6979HIGHCustomer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File UploadEPSS 1.1%CVE-2025-0394HIGHGroundhogg <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload FunctionEPSS 1.1%CVE-2024-26503CRITICALUnrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code vEPSS 1.1%CVE-2020-6965—In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X EPSS 1.1%CVE-2023-53952HIGHDotclear 2.25.3 Authenticated Remote Code Execution via File UploadEPSS 1.1%CVE-2022-2420HIGHURVE Web Manager uploader.php unrestricted uploadEPSS 1.1%CVE-2025-34329CRITICALAudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Backup Upload RCE via ajaxBackupUploadFile.phpEPSS 1.1%CVE-2024-8019CRITICALArbitrary File Write/Overwrite in lightning-ai/pytorch-lightningEPSS 1.1%CVE-2023-47129HIGHStatamic CMS remote code execution via front-end form uploadsEPSS 1.1%CVE-2025-48471HIGHFreeScout Vulnerable to Arbitrary File UploadEPSS 1.1%CVE-2025-4800HIGHMasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 1.1%CVE-2010-1433—Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify user-suEPSS 1.1%