Falhas do tipo CWE-434

3.091 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2025-12181HIGHContentStudio <= 1.3.7 - Authenticated (Author+) Arbitrary File UploadEPSS 0.6%CVE-2024-53863HIGHSynapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decodersEPSS 0.6%CVE-2026-82780HIGHUnrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote autEPSS 0.6%CVE-2024-54525HIGHA logic issue was addressed with improved file handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visEPSS 0.6%CVE-2024-2565MEDIUMPandaXGO PandaX File Extension upload.go unrestricted uploadEPSS 0.6%CVE-2025-5012HIGHWorkreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media'EPSS 0.6%CVE-2024-31292HIGHWordPress Import XML and RSS Feeds plugin <= 2.1.5 - Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2024-30231CRITICALWordPress Product Import Export for WooCommerce plugin <= 2.4.1 - Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2023-4559MEDIUMBettershop LaikeTui POST Request unrestricted uploadEPSS 0.6%CVE-2023-6091HIGHWordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2024-32954CRITICALWordPress Newsletters plugin <= 4.9.5 - Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2023-47842CRITICALWordPress CataBlog plugin <= 1.7.0 - Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2024-27951CRITICALWordPress Multiple Page Generator Plugin <= 3.4.0 - Auth. Remote Code Execution (RCE) vulnerabilityEPSS 0.6%CVE-2023-6090CRITICALWordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2023-47846CRITICALWordPress WP Githuber MD plugin <= 1.16.2 - Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2024-24714HIGHWordPress Icons Font Loader Plugin <= 1.1.4 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2022-2744MEDIUMSourceCodester Gym Management System Background Management add_exercises.php unrestricted uploadEPSS 0.6%CVE-2023-50729HIGHAn unrestricted file upload vulnerability in traccar leads to RCEEPSS 0.6%CVE-2024-10201HIGHWellchoose Administrative Management System - Arbitrary File UploadEPSS 0.6%CVE-2025-63601CRITICALSnipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious bacEPSS 0.6%