Falhas do tipo CWE-434

3.246 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2025-9846CRITICALUnrestricted File Upload in TaletSys Inka.NetEPSS 1.1%CVE-2025-13595CRITICALCIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File UploadEPSS 1.0%CVE-2025-13597CRITICALAI Feeds <= 1.0.11 - Unauthenticated Arbitrary File UploadEPSS 1.0%CVE-2024-43249CRITICALWordPress Bit Form Pro plugin <= 2.6.4 - Authenticated Arbitrary File Upload vulnerabilityEPSS 1.0%CVE-2023-4186MEDIUMSourceCodester Pharmacy Management System manage_website.php unrestricted uploadEPSS 1.0%CVE-2024-49607CRITICALWordPress WP Dropbox Dropins plugin <= 1.0 - Arbitrary File Upload vulnerabilityEPSS 1.0%CVE-2024-2690MEDIUMSourceCodester Online Discussion Forum Site uupdate.php unrestricted uploadEPSS 1.0%CVE-2026-105899CRITICALColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)EPSS 1.0%CVE-2026-32756HIGHAdmidio: Unrestricted File Upload via CSRF Token Validation Bypass in Documents & Files ModuleEPSS 1.0%CVE-2022-41681CRITICALFile Upload vulnerability in Forma LMSEPSS 1.0%CVE-2022-42925CRITICALUnrestricted Upload of File with Dangerous Type in Forma LMSEPSS 1.0%CVE-2022-43234CRITICALAn arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted EPSS 1.0%CVE-2023-5966MEDIUMUnrestricted Upload of File with Dangerous Type in EspoCRMEPSS 1.0%CVE-2023-5965MEDIUMUnrestricted Upload of File with Dangerous Type in EspoCRMEPSS 1.0%CVE-2022-3478MEDIUMAn issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.4.6, all versions starting from 15.5 before 15.5.EPSS 1.0%CVE-2024-13359HIGHProduct Input Fields for WooCommerce <= 1.12.0 - Unauthenticated Limited File UploadEPSS 1.0%CVE-2022-47042HIGHMCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do.EPSS 1.0%CVE-2025-13516HIGHSureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers <= 1.9.0 - Unauthenticated Arbitrary File UploadEPSS 1.0%CVE-2022-40050CRITICALZFile v4.1.1 was discovered to contain an arbitrary file upload vulnerability via the component /file/upload/1.EPSS 1.0%CVE-2026-12872CRITICALWebinfos <= 1.2 - Unauthenticated Arbitrary File UploadEPSS 1.0%