Falhas do tipo CWE-434

3.246 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2022-2804MEDIUMSourceCodester Zoo Management System apply_vacancy.php unrestricted uploadEPSS 1.0%CVE-2023-5284MEDIUMSourceCodester Engineers Online Portal upload_save_student.php unrestricted uploadEPSS 1.0%CVE-2023-3692MEDIUMUnrestricted Upload of File with Dangerous Type in admidio/admidioEPSS 1.0%CVE-2023-33386CRITICALMarsCTF 1.2.1 has an arbitrary file upload vulnerability in the interface for uploading attachments in the background.EPSS 1.0%CVE-2022-2046—Directorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File UploadEPSS 1.0%CVE-2022-2212MEDIUMSourceCodester Library Management System /card/index.php unrestricted uploadEPSS 1.0%CVE-2024-6707HIGHOpen WebUI Arbitrary File Upload + Path TraversalEPSS 1.0%CVE-2019-25758HIGHJoomla! Component vBizz 1.0.7 Remote Code ExecutionEPSS 1.0%CVE-2024-7257CRITICALYayExtra – WooCommerce Extra Product Options <= 1.3.7 - Unauthenticated Arbitrary File Upload via handle_upload_file FunctionEPSS 1.0%CVE-2024-24202CRITICALAn arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 alEPSS 1.0%CVE-2024-58298CRITICALCompuware iStrobe Web 20.13 Pre-Auth Remote Code Execution via File UploadEPSS 1.0%CVE-2024-0916CRITICALUnauthenticated Remote Code Execution in UvDesk CommunityEPSS 1.0%CVE-2026-23697HIGHVtiger CRM < 8.4.0 Authenticated File Upload RCE via Documents ModuleEPSS 1.0%CVE-2026-2354HIGHSwiss Toolkit For WP <= 1.4.6 - Authenticated (Author+) Arbitrary File Upload via upload_extension_files()EPSS 1.0%CVE-2026-82450HIGHBookStack before 26.05.4 Remote Code Execution via Book CoverEPSS 1.0%CVE-2025-12973HIGHS2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.8 - Authenticated (Editor+) Arbitrary File UploadEPSS 1.0%CVE-2022-1345CRITICALStored XSS viva .svg file upload in causefx/organizrEPSS 1.0%CVE-2023-4159CRITICALUnrestricted Upload of File with Dangerous Type in omeka/omeka-sEPSS 1.0%CVE-2024-31210HIGHPHP file upload bypass via Plugin installerEPSS 1.0%CVE-2025-11391CRITICALPPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated Arbitrary File UploadEPSS 1.0%