Falhas do tipo CWE-434

3.086 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2024-42778HIGHAn Unrestricted file upload vulnerability was found in "/music/ajax.php?action=save_playlist" in Kashipara Music Management System v1.0. ThiEPSS 0.8%CVE-2022-31041HIGHInsufficient content-type validation for uploaded files in open-formsEPSS 0.8%CVE-2023-34385CRITICALWordPress Export Import Menus Plugin <= 1.8.0 is vulnerable to Arbitrary File UploadEPSS 0.8%CVE-2024-6054HIGHAuto Featured Image <= 1.2 - Authenticated (Contributor+) Arbitrary File UploadEPSS 0.8%CVE-2022-33166HIGHIBM Security Directory Suite VA file uploadEPSS 0.8%CVE-2024-4927MEDIUMSourceCodester Simple Online Bidding System unrestricted uploadEPSS 0.8%CVE-2024-5853CRITICALImage Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File UploadEPSS 0.8%CVE-2024-6756HIGHSocial Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File UploadEPSS 0.8%CVE-2026-14270HIGHExtra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) <= 2.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload in eco_save_settingsEPSS 0.8%CVE-2026-5411HIGHWP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.8%CVE-2026-6261HIGHBetheme <= 28.4 - Authenticated (Author+) Arbitrary File Upload to Remote Code Execution via Icon Pack UploadEPSS 0.8%CVE-2026-80237HIGHThinking Software Technology｜Efence - Arbitrary File UploadEPSS 0.8%CVE-2024-6161HIGHDefault Thumbnail Plus <= 1.0.2.3 - Authenticated (Contributor+) Arbitrary File UploadEPSS 0.8%CVE-2022-2647HIGHjeecg-boot unrestricted uploadEPSS 0.8%CVE-2026-9009HIGHCrawlomatic Multipage Scraper Post Generator <= 2.7.2 - Authenticated (Author+) Remote Code Execution via 'callback_raw' Shortcode AttributeEPSS 0.8%CVE-2026-6692HIGHSlider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber+) Arbitrary File Upload via _get_media_urlEPSS 0.8%CVE-2021-26628HIGHMaxBoard XSS and File Upload VulnerabilityEPSS 0.8%CVE-2024-6431HIGHMedia.net Ads Manager <= 2.10.13 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.8%CVE-2026-78088HIGHContest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' ParameterEPSS 0.8%CVE-2024-8242MEDIUMMStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Authenticated (Subscriber+) Limited Arbitrary File UploadEPSS 0.8%