Falhas do tipo CWE-434

3.091 resultados

Upload irrestrito de arquivo com tipo perigoso

A aplicação aceita upload de arquivos sem validar adequadamente o tipo ou extensão, permitindo que um atacante envie executáveis, scripts ou outros arquivos maliciosos que serão armazenados ou executados no servidor. O risco aumenta se o arquivo for salvo em diretório acessível pela web ou em local onde será processado automaticamente.

Exemplo

Um sistema de upload de 'fotos de perfil' verifica apenas o tamanho do arquivo, mas não valida a extensão. Um atacante envia um arquivo .php disfarçado de imagem; se salvo em /uploads/ acessível via web, ele consegue executar código PHP no servidor ao acessar a URL direta.

Como mitigar

Valide extensões contra uma lista branca (whitelist) de tipos permitidos, verifique a assinatura do arquivo (magic bytes) e não confie apenas no Content-Type do cliente. Armazene uploads fora do diretório web ou configure o servidor para não executar scripts no diretório de uploads.

CVE-2025-3593MEDIUMZHENFENG13/code-projects My-Blog-layui authorImg upload unrestricted uploadEPSS 0.6%CVE-2025-32682CRITICALWordPress MapSVG Lite plugin <= 8.6.4 - Arbitrary File Upload VulnerabilityEPSS 0.6%CVE-2026-50124HIGHDataEase: Remote Code Execution (RCE) via Zip Protocol & File DropperEPSS 0.6%CVE-2025-34336MEDIUMeGovFramework <= 4.3.1 Unauthenticated File Upload via Web Editor Image Upload EndpointsEPSS 0.6%CVE-2021-24490—Email Artillery <= 4.1 - Arbitrary File UploadEPSS 0.6%CVE-2025-11318MEDIUMTipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 uploadWxFile.do unrestricted uploadEPSS 0.6%CVE-2023-40051CRITICALProgress Application Server (PAS) for OpenEdge File Upload via Directory TraversalEPSS 0.6%CVE-2023-51475CRITICALWordPress WP MLM Unilevel Plugin <= 4.0 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2024-56057CRITICALWordPress WPLMS plugin < 1.9.9.5.2 - Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2024-58295HIGHElkArte Forum 1.1.9 Authenticated Remote Code Execution via Theme UploadEPSS 0.6%CVE-2022-46660HIGH An unauthorized user could alter or write files with full control over the path and content of the file. EPSS 0.6%CVE-2025-10907HIGHAuthenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code ExecutionEPSS 0.6%CVE-2023-25922MEDIUMIBM Security Guardium Key Lifecycle Manager file uploadEPSS 0.6%CVE-2023-24530HIGHSAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code thEPSS 0.6%CVE-2025-3765MEDIUMSourceCodester Web-based Pharmacy Product Management System edit-photo.php unrestricted uploadEPSS 0.6%CVE-2025-3764MEDIUMSourceCodester Web-based Pharmacy Product Management System edit-product.php unrestricted uploadEPSS 0.6%CVE-2025-3244MEDIUMSourceCodester Web-based Pharmacy Product Management System Create User Page add-admin.php unrestricted uploadEPSS 0.6%CVE-2026-1565HIGHUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Authenticated (Author+) Arbitrary File UploadEPSS 0.6%CVE-2025-69828CRITICALFile Upload vulnerability in TMS Global Software TMS Management Console v.6.3.7.27386.20250818 allows a remote attacker to execute arbitraryEPSS 0.6%CVE-2026-78839HIGHAn arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar filEPSS 0.6%