Falhas do tipo CWE-434

3.091 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2023-29631CRITICALPrestaShop jmsslider 1.6.0 is vulnerable to Incorrect Access Control via ajax_jmsslider.php.EPSS 0.7%CVE-2026-53691HIGHRemote Code Execution in Redeight CMSEPSS 0.7%CVE-2024-0643CRITICALUnrestricted upload of dangerous file types in C21 Live Encoder and Live MosaicEPSS 0.7%CVE-2024-0648HIGHYunyou CMS Common.php unrestricted uploadEPSS 0.7%CVE-2025-55454HIGHAn authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrarEPSS 0.7%CVE-2025-12974HIGHGravity Forms <= 2.9.21.1 - Unauthenticated Arbitrary File Upload via Legacy Chunked UploadEPSS 0.7%CVE-2024-30510CRITICALWordPress Salon booking system plugin <= 9.5 - Arbitrary File Upload vulnerabilityEPSS 0.7%CVE-2021-3906MEDIUMUnrestricted Upload of File with Dangerous Type in bookstackapp/bookstackEPSS 0.7%CVE-2025-46001CRITICALAn arbitrary file upload vulnerability in the is_allowed_file_type() function of Filemanager v2.3.0 allows attackers to execute arbitrary coEPSS 0.7%CVE-2024-40549HIGHAn arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlace of PublicCMS v4.0.202302.e allows attackers to execute EPSS 0.7%CVE-2024-40548HIGHAn arbitrary file upload vulnerability in the component /admin/cmsTemplate/save of PublicCMS v4.0.202302.e allows attackers to execute arbitEPSS 0.7%CVE-2026-50768HIGHFile Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary codeEPSS 0.7%CVE-2024-54370CRITICALWordPress Video & Photo Gallery for Ultimate Member plugin <= 1.1.0 - Arbitrary File Upload vulnerabilityEPSS 0.7%CVE-2024-6280MEDIUMSourceCodester Simple Online Bidding System unrestricted uploadEPSS 0.7%CVE-2025-10747HIGHWP-DownloadManager <= 1.68.11 - Authenticated (Admin+) Arbitrary File UploadEPSS 0.7%CVE-2024-9794MEDIUMCodezips Online Shopping Portal update-image1.php unrestricted uploadEPSS 0.7%CVE-2024-7904MEDIUMDedeBIZ File Extension file_manage_control.php unrestricted uploadEPSS 0.7%CVE-2024-58283HIGHWBCE CMS 1.6.2 Remote Code Execution via Elfinder File UploadEPSS 0.7%CVE-2025-1818MEDIUMzj1983 zz ZfileAction.upload unrestricted uploadEPSS 0.7%CVE-2026-54414CRITICALFileRise shared-folder upload path traversal allows arbitrary file write and admin takeoverEPSS 0.7%