Falhas do tipo CWE-434

3.087 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2024-1034HIGHopenBI File.php uploadFile unrestricted uploadEPSS 0.8%CVE-2025-6553CRITICALOvatheme Events Manager <= 1.8.5 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2021-47753CRITICALphpKF CMS 3.00 Beta y6 - Remote Code Execution (RCE) (Unauthenticated)EPSS 0.8%CVE-2022-42029HIGHChamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with access to 'big fileEPSS 0.8%CVE-2023-5795MEDIUMCodeAstro POS System Profile Picture profil unrestricted uploadEPSS 0.8%CVE-2023-5829MEDIUMcode-projects Admission Management System student_avatar.php unrestricted uploadEPSS 0.8%CVE-2025-63228CRITICALThe Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /EPSS 0.8%CVE-2026-66270HIGHDell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A hiEPSS 0.8%CVE-2025-1028HIGHContact Manager <= 8.6.4 - Unauthenticated Arbitrary Double File Extension UploadEPSS 0.8%CVE-2026-3418CRITICALArbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code ExecutionEPSS 0.8%CVE-2026-45053CRITICALCubeCart: Authenticated Arbitrary File Upload to RCE in REST Files APIEPSS 0.8%CVE-2026-30804HIGHUnrestricted File Upload in Extension Uploader leads to Remote Code ExecutionEPSS 0.8%CVE-2026-66271HIGHDell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A hiEPSS 0.8%CVE-2026-58409CRITICALChurchCRM: Authenticated Remote Code Execution (RCE) via Malicious Plugin UploadEPSS 0.8%CVE-2026-14946HIGHFrauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious configuration file.EPSS 0.8%CVE-2022-1411CRITICALUnrestructed file upload in yetiforcecompany/yetiforcecrmEPSS 0.8%CVE-2024-29891HIGHZITADEL Improper Content-Type Validation Leads to Account Takeover via Stored XSS + CSP BypassEPSS 0.8%CVE-2026-1331CRITICALAMASTAR Technology｜MeetingHub - Arbitrary File UploadEPSS 0.8%CVE-2023-34126—Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesystem with root privileEPSS 0.8%CVE-2024-13882HIGHAiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary File UploadEPSS 0.8%