Falhas do tipo CWE-434

3.091 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2024-7192MEDIUMitsourcecode Society Management System student.php unrestricted uploadEPSS 0.6%CVE-2026-9182CRITICALUnvalidated File Upload vulnerability in ArcGIS Server.EPSS 0.6%CVE-2024-5734MEDIUMitsourcecode Online Discussion Forum poster.php unrestricted uploadEPSS 0.6%CVE-2021-47943HIGHTextPattern CMS 4.8.7 Remote Code Execution via File UploadEPSS 0.6%CVE-2020-36882HIGHFlexsense DiskBoss Application Crash Denial of ServiceEPSS 0.6%CVE-2025-2115MEDIUMzzskzy Warehouse Refinement Management System AcceptZip.ashx ProcessRequest unrestricted uploadEPSS 0.6%CVE-2024-48734HIGHUnrestricted file upload in /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} in SAS Studio 9.4 allows remote attacker to upload malicEPSS 0.6%CVE-2023-51411CRITICALWordPress Frontend Admin by DynamiApps Plugin <= 3.18.3 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2023-51473CRITICALWordPress TerraClassifieds Plugin <= 2.0.3 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2023-7330CRITICALRuijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.phpEPSS 0.6%CVE-2025-29411CRITICALAn arbitrary file upload vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute aEPSS 0.6%CVE-2025-3234HIGHFile Manager Pro – Filester <= 1.8.8 - Authenticated (Administrator+) Arbitrary File UploadEPSS 0.6%CVE-2024-11211MEDIUMEyouCMS Website Logo unrestricted uploadEPSS 0.6%CVE-2026-56702HIGHAdminer before 5.4.3 Unrestricted File Upload via AdminerFileUploadEPSS 0.6%CVE-2025-4102HIGHBeaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File UploadEPSS 0.6%CVE-2025-9113CRITICALDoccure Core <= 1.5.3 - Unauthenticated Arbitrary File UploadEPSS 0.6%CVE-2025-10412CRITICALProduct Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) <= 4.9.55 - Unauthenticated Arbitrary File Upload via 'uni_cpo_upload_file'EPSS 0.6%CVE-2024-11674MEDIUMCodeAstro Hospital Management System his_doc_update-account.php unrestricted uploadEPSS 0.6%CVE-2025-12775HIGHWP Dropzone <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.6%CVE-2025-13376HIGHProjectList <= 0.3.0 - Authenticated (Editor+) Arbitrary File UploadEPSS 0.6%