Falhas do tipo CWE-434

3.246 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2024-31012CRITICALAn issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive informEPSS 1.2%CVE-2022-44400CRITICALPurchase Order Management System v1.0 contains a file upload vulnerability via /purchase_order/admin/?page=system_info.EPSS 1.2%CVE-2024-1468HIGHAvada | Website Builder For WordPress & WooCommerce <= 7.11.4 - Authenticated (Contributor+) Arbitrary File UploadEPSS 1.2%CVE-2024-10410MEDIUMSourceCodester Online Hotel Reservation System controller.php upload unrestricted uploadEPSS 1.2%CVE-2022-2418HIGHURVE Web Manager img_upload.php unrestricted uploadEPSS 1.1%CVE-2026-13430HIGHPost Export Import with Media <= 1.13.1 - Authenticated (Administrator+) Arbitrary File Upload via Trailing-Dot Filename Bypass in ZIP Media ImportEPSS 1.1%CVE-2025-13374CRITICALKalrav AI Agent <= 2.3.3 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX ActionEPSS 1.1%CVE-2024-47946HIGHOS Command Execution through Arbitrary File UploadEPSS 1.1%CVE-2015-10087MEDIUMUpThemes Theme DesignFolio Plus unrestricted uploadEPSS 1.1%CVE-2024-8066HIGHFile Manager Pro – Filester <= 1.8.6- Authenticated (Subscriber+) Arbitrary File UploadEPSS 1.1%CVE-2026-87796CRITICALMulti Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File UploadEPSS 1.1%CVE-2026-8778CRITICALMIPL Grouped Checkout Fields for WooCommerce <= 1.2.2 - Unauthenticated Arbitrary File UploadEPSS 1.1%CVE-2022-45039HIGHAn arbitrary file upload vulnerability in the Server Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary code via a craEPSS 1.1%CVE-2025-12352CRITICALGravity Forms <= 2.9.20 - Unauthenticated Arbitrary File Upload via 'copy_post_image'EPSS 1.1%CVE-2023-29721CRITICALSofaWiki <= 3.8.9 has a file upload vulnerability that leads to command execution.EPSS 1.1%CVE-2023-6979HIGHCustomer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File UploadEPSS 1.1%CVE-2024-1567HIGHRoyal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File UploadEPSS 1.1%CVE-2026-18351CRITICALDrag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' ParameterEPSS 1.1%CVE-2020-6965—In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X EPSS 1.1%CVE-2022-40925HIGHZoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_event" file of the "Events" mEPSS 1.1%