Falhas do tipo CWE-434

3.091 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2025-44139HIGHEmlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=upload_zipEPSS 0.7%CVE-2024-1259MEDIUMJuanpao JPShop API AppController.php unrestricted uploadEPSS 0.7%CVE-2024-6439MEDIUMSourceCodester Home Owners Collection Management System unrestricted uploadEPSS 0.7%CVE-2026-3749MEDIUMBytedesk SVG File UploadRestService.java handleFileUpload unrestricted uploadEPSS 0.7%CVE-2021-4443CRITICALWordPress Mega Menu <= 2.0.6 - Arbitrary File CreationEPSS 0.7%CVE-2025-1598MEDIUMSourceCodester Best Church Management Software asset_crud.php unrestricted uploadEPSS 0.7%CVE-2024-29661CRITICALA File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload.EPSS 0.7%CVE-2024-7500MEDIUMitsourcecode Airline Reservation System admin_class.php save_settings unrestricted uploadEPSS 0.7%CVE-2024-4921MEDIUMSourceCodester Employee and Visitor Gate Pass Logging System unrestricted uploadEPSS 0.7%CVE-2024-58349CRITICALWordPress Theme Travelscape 1.0.3 Arbitrary File UploadEPSS 0.7%CVE-2021-24960—WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Malicious SVGEPSS 0.7%CVE-2024-4946MEDIUMSourceCodester Online Art Gallery Management System adminHome.php unrestricted uploadEPSS 0.7%CVE-2023-39307HIGHWordPress Avada theme <= 7.11.1 - Authenticated Arbitrary File Upload vulnerabilityEPSS 0.7%CVE-2026-84171CRITICALWP Images Upload on Piclect <= 1.0 - Unauthenticated Arbitrary File UploadEPSS 0.7%CVE-2024-1818MEDIUMCodeAstro Membership Management System Logo unrestricted uploadEPSS 0.7%CVE-2025-6207HIGHWP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.7%CVE-2026-18080CRITICALERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP AttachmentEPSS 0.7%CVE-2024-1819MEDIUMCodeAstro Membership Management System Add Members Tab unrestricted uploadEPSS 0.7%CVE-2025-0702MEDIUMJoeyBling bootplus SysFileController.java unrestricted uploadEPSS 0.7%CVE-2026-53691HIGHRemote Code Execution in Redeight CMSEPSS 0.7%