Falhas do tipo CWE-434

3.091 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2025-3040MEDIUMProject Worlds Online Time Table Generator add_student.php unrestricted uploadEPSS 0.6%CVE-2023-49815CRITICALWordPress WappPress plugin <= 5.0.3 - Unauthenticated Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2023-7026MEDIUMLightxun IPTV Gateway web_upload_template.html unrestricted uploadEPSS 0.6%CVE-2024-25925CRITICALWordPress WooCommerce Easy Checkout Field Editor, Fees & Discounts Plugin <= 3.5.12 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2023-51419CRITICALWordPress BERTHA AI Plugin <= 1.11.10.7 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2024-25913CRITICALWordPress MoveTo Plugin <= 6.2 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2023-51468CRITICALWordPress Rencontre – Dating Site Plugin <= 3.10.1 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2026-15049HIGHDepicter < 4.8.0 - Editor+ Arbitrary File Upload via ZIP ImportEPSS 0.6%CVE-2024-9904MEDIUM07FLYCMS/07FLY-CMS/07FlyCRM pictureUpload unrestricted uploadEPSS 0.6%CVE-2022-0499—Sermon Browser <= 0.45.22 - Arbitrary File Upload via CSRFEPSS 0.6%CVE-2024-9816MEDIUMCodezips Tourist Management System change-image.php unrestricted uploadEPSS 0.6%CVE-2024-9903MEDIUM07FLYCMS/07FLY-CMS/07FlyCRM fileUpload unrestricted uploadEPSS 0.6%CVE-2026-41937HIGHVvveb < 1.0.8.3 Unrestricted File Upload RCE via Plugin UploadEPSS 0.6%CVE-2024-9855MEDIUM07FLYCMS/07FLY-CMS/07FlyCRM Module Plug-In sysmodule_1 uploadFile unrestricted uploadEPSS 0.6%CVE-2024-9815MEDIUMCodezips Tourist Management System create-package.php unrestricted uploadEPSS 0.6%CVE-2025-5299MEDIUMSourceCodester Client Database Management System user_order_customer_update.php unrestricted uploadEPSS 0.6%CVE-2024-51791CRITICALWordPress Forms plugin <= 2.8.0 - Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2026-82524HIGHUnoPim File Upload RCE via TinyMCE Image Upload EndpointEPSS 0.6%CVE-2026-84637CRITICALCalendar invitation attachments could launch local executablesEPSS 0.6%CVE-2026-54567HIGHFlask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)EPSS 0.6%