Falhas do tipo CWE-434

3.086 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2026-40040HIGHPachno 1.0.6 Unrestricted File Upload Remote Code ExecutionEPSS 0.8%CVE-2022-2694MEDIUMSourceCodester Company Website CMS unrestricted uploadEPSS 0.8%CVE-2022-2678MEDIUMSourceCodester Alphaware Simple E-Commerce System Background Management Page admin_feature.php unrestricted uploadEPSS 0.8%CVE-2022-2909MEDIUMSourceCodester Simple and Nice Shopping Cart Script profile.php unrestricted uploadEPSS 0.8%CVE-2026-61457MEDIUMGrav before 1.0.3 Remote Code Execution via File Upload Extension BypassEPSS 0.8%CVE-2024-10590HIGHOpt-In Downloads <= 4.07 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.8%CVE-2024-11018CRITICALGrand Vice info Webopac - Arbitrary File UploadEPSS 0.8%CVE-2024-2148MEDIUMSourceCodester Online Mobile Management Store Users.php unrestricted uploadEPSS 0.8%CVE-2023-40204CRITICALWordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File UploadEPSS 0.8%CVE-2024-11661MEDIUMCodezips Free Exam Hall Seating Management System Profile Image profile.php unrestricted uploadEPSS 0.8%CVE-2023-5284MEDIUMSourceCodester Engineers Online Portal upload_save_student.php unrestricted uploadEPSS 0.8%CVE-2025-34046CRITICALFanwei E-Office Unauthenticated File UploadEPSS 0.8%CVE-2026-19089CRITICALProduct Input Fields for WooCommerce < 2.0.2 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2026-15039CRITICALGift Cards For WooCommerce Pro < 4.2.10 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2023-7061HIGHAdvanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File UploadEPSS 0.8%CVE-2023-2419MEDIUMZhong Bang CRMEB SystemAttachmentServices.php videoUpload unrestricted uploadEPSS 0.8%CVE-2026-13714CRITICALRealtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code ExecutionEPSS 0.8%CVE-2024-28147HIGHUnrestricted Upload of Files in edu-sharingEPSS 0.8%CVE-2026-16250CRITICALPersonal QR Message <= 1.0 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2026-16618CRITICALImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload Leading to Remote Code ExecutionEPSS 0.8%