Falhas do tipo CWE-434

3.091 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2024-25909CRITICALWordPress WP Media folder Plugin <= 5.7.2 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2026-77991CRITICALJoomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1EPSS 0.6%CVE-2026-88857CRITICALJoomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7EPSS 0.6%CVE-2024-3778HIGHAi3 QbiBot - Unrestricted File UploadEPSS 0.6%CVE-2024-52677CRITICALHkCms <= v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php.EPSS 0.6%CVE-2025-4413HIGHPixabay Images <= 3.4 - Authenticated (Author+) Arbitrary File UploadEPSS 0.6%CVE-2023-49814CRITICALWordPress Symbiostock Lite Plugin <= 6.0.0 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2024-24000CRITICALjshERP v3.3 is vulnerable to Arbitrary File Upload. The jshERP-boot/systemConfig/upload interface does not check the uploaded file type, andEPSS 0.6%CVE-2023-32689MEDIUMParse Server vulnerable to phishing attack vulnerability that involves uploading malicious HTML fileEPSS 0.6%CVE-2023-5262MEDIUMOpenRapid RapidCMS uploadicon.php isImg unrestricted uploadEPSS 0.6%CVE-2025-26892CRITICALWordPress Celestial Aura plugin <= 2.2 - Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2025-6086HIGHCSV Me <= 2.0 - Authenticated (Administrator+) Arbitrary File UploadEPSS 0.6%CVE-2020-37023HIGHKoken CMS 0.22.24 - Arbitrary File UploadEPSS 0.6%CVE-2025-24650CRITICALWordPress Tourfic plugin <= 2.15.3 - Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2023-53871MEDIUMSoosyze 2.0.0 Unrestricted File Upload via Broken Upload LogicEPSS 0.6%CVE-2024-48202CRITICALicecms <=3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile.EPSS 0.6%CVE-2024-7910MEDIUMCodeAstro Online Railway Reservation System Profile Photo Update emp-profile-avatar.php unrestricted uploadEPSS 0.6%CVE-2026-25923HIGHPhar Deserialization leading to Arbitrary File Deletion in my little forumEPSS 0.6%CVE-2026-34031MEDIUMApache Answer: The custom avatar was not properly validatedEPSS 0.6%CVE-2024-1261MEDIUMJuanpao JPShop API ComboController.php actionIndex unrestricted uploadEPSS 0.6%