Falhas do tipo CWE-434

3.086 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2024-47169HIGHAgnai vulnerable to Remote Code Execution via JS Upload using Directory TraversalEPSS 0.8%CVE-2023-23970CRITICALWordPress Corsa Theme <= 1.5 is vulnerable to Arbitrary File UploadEPSS 0.8%CVE-2025-66449HIGHConvertX has Path Traversal that leads to Arbitrary File Write and Arbitrary Code ExecutionEPSS 0.8%CVE-2023-40183HIGHDataEase has a vulnerability to obtain user cookiesEPSS 0.8%CVE-2024-25274CRITICALAn arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code EPSS 0.8%CVE-2025-11170CRITICALWP移行専用プラグイン for CPI <= 1.0.2 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2025-12674CRITICALKiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2022-3682CRITICALSDM600 file permission validationEPSS 0.8%CVE-2023-6723CRITICALUnrestricted Upload of File with Dangerous Type in RepoxEPSS 0.8%CVE-2024-0505MEDIUMZhongFuCheng3y Austin Upload Material Menu MaterialController.java getFile unrestricted uploadEPSS 0.8%CVE-2023-5790MEDIUMSourceCodester File Manager App add-file.php unrestricted uploadEPSS 0.8%CVE-2021-3846MEDIUMUnrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iiiEPSS 0.8%CVE-2024-28423CRITICALAirflow-Diagrams v2.1.0 was discovered to contain an arbitrary file upload vulnerability in the unsafe_load function at cli.py. This vulneraEPSS 0.8%CVE-2026-26975HIGHMusic Assistant Server Path Traversal in Playlist Update API Allows Remote Code ExecutionEPSS 0.8%CVE-2025-6679CRITICALContact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2024-33120CRITICALRoothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function. This vuEPSS 0.8%CVE-2024-11979CRITICALInterinfo DreamMaker - Unrestricted File Upload through Path TraversalEPSS 0.8%CVE-2025-29287CRITICALAn arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crEPSS 0.8%CVE-2024-4197CRITICALAvaya IP Office One-X Portal File Upload VulnerabilityEPSS 0.8%CVE-2026-35164HIGHBrave CMS Sffected by Unrestricted File Upload via CKEditor EndpointEPSS 0.8%