Falhas do tipo CWE-434

3.246 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2023-47621HIGHRemote code execution via file uploads in guest-entries EPSS 1.0%CVE-2024-3912CRITICALASUS Router - Upload arbitrary firmwareEPSS 1.0%CVE-2024-4389HIGHSlider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File UploadEPSS 1.0%CVE-2024-58282HIGHSerendipity 2.5.0 Remote Code Execution via Authenticated Media UploadEPSS 1.0%CVE-2024-50510CRITICALWordPress AR For Woocommerce plugin <= 6.3 - Arbitrary File Upload vulnerabilityEPSS 1.0%CVE-2022-45968HIGHAlist v3.4.0 is vulnerable to File Upload. A user with only file upload permission can upload any file to any folder (even a password protecEPSS 1.0%CVE-2022-30529HIGHFile upload vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to upload arbitraryEPSS 1.0%CVE-2023-23328HIGHA File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileUpload.php by uploadiEPSS 1.0%CVE-2023-0670HIGHUlearn version a5a7ca20de859051ea0470542844980a66dfc05d allows an attacker with administrator permissions to obtain remote code execution onEPSS 1.0%CVE-2023-53933HIGHSerendipity 2.4.0 Authenticated Remote Code Execution via File UploadEPSS 1.0%CVE-2023-6976HIGHUnrestricted Upload of File with Dangerous TypeEPSS 1.0%CVE-2025-1093CRITICALAIHub <= 1.3.7 - Unauthenticated Arbitrary File Upload in generate_imageEPSS 1.0%CVE-2025-3054HIGHWP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 1.0%CVE-2025-2249HIGHSoJ Soundslides <= 1.2.2 - Authenticated (Contributor+) Arbitrary File UploadEPSS 1.0%CVE-2025-43946CRITICALTCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload (combined with Path Traversal).EPSS 1.0%CVE-2022-2883HIGHIn affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of ServiceEPSS 1.0%CVE-2023-1970MEDIUMyuan1994 tpAdmin Upload.php Upload unrestricted uploadEPSS 1.0%CVE-2025-11948CRITICALExcellent Infotek｜Document Management System - Arbitrary File UploadEPSS 1.0%CVE-2026-103889CRITICAL3D Product configurator for WooCommerce <= 2.16.2 - Unauthenticated Remote Code Execution via 'xpv_image' ParameterEPSS 1.0%CVE-2022-42698CRITICALWordPress Api2Cart Bridge Connector plugin <= 1.1.0 - Arbitrary File Upload vulnerabilityEPSS 1.0%