Falhas do tipo CWE-434

3.244 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2026-3891CRITICALPix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File UploadEPSS 32.4%CVE-2023-5146MEDIUMD-Link DAR-7000/DAR-8000 updatelib.php unrestricted uploadEPSS 32.4%CVE-2024-57968CRITICALAdvantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessibleEPSS 32.3%KEVCVE-2026-56290CRITICALJoomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0EPSS 30.9%KEVCVE-2023-5148MEDIUMD-Link DAR-7000/DAR-8000 uploadfile.php unrestricted uploadEPSS 30.5%CVE-2025-34511HIGHSitecore PowerShell Extension RCE via Unrestricted UploadEPSS 30.4%CVE-2023-50564HIGHAn arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary EPSS 29.3%CVE-2024-32002CRITICALGit's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code ExecutionEPSS 29.2%CVE-2023-2648MEDIUMWeaver E-Office uploadify.php unrestricted uploadEPSS 28.5%CVE-2022-40471CRITICALRemote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture uploaEPSS 28.0%CVE-2026-3844CRITICALBreeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remoteEPSS 27.7%CVE-2018-4063HIGHAn exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A speciEPSS 27.3%KEVCVE-2024-5247HIGHNETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution VulnerabilityEPSS 26.9%CVE-2023-5147MEDIUMD-Link DAR-7000 updateos.php unrestricted uploadEPSS 26.4%CVE-2023-3852MEDIUMOpenRapid RapidCMS upload.php unrestricted uploadEPSS 25.2%CVE-2022-1952—eaSYNC < 1.1.16 - Unauthenticated Arbitrary File UploadEPSS 24.6%CVE-2023-2924MEDIUMSupcon SimField reportupload.aspx unrestricted uploadEPSS 24.3%CVE-2025-9712HIGHInsufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote unauthenticated attacker toEPSS 23.9%CVE-2022-0863—WP SVG Icons <= 3.2.3 - Admin+ Remote Code Execution (RCE)EPSS 23.8%CVE-2022-40878HIGHIn Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code ExeEPSS 23.7%