cve.bz

CWE-434: Unrestricted Upload of File with Dangerous Type, page 71

Filter

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

What the weakness is: CWE-434 at MITRE. OWASP Top 10: A06:2025 Insecure Design

Related attack patterns (CAPEC): 1
  • CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-434, as MITRE names them. Credits.

Ask an AI about CWE-434

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-434: Unrestricted Upload of File with Dangerous Type and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/434.html and https://cve.bz/cve/cwe/434?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2020-13675EPSS 1.4%

    Drupal's JSON:API and REST/File modules allow file uploads through their HTTP APIs. The modules do not correctly run all file validation, which causes an access bypass vulnerability. An attacker might be able to upload files that bypass th…

  2. 7.2CVE-2022-23048EPSS 2.1%

    Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in the format of a ZIP file with a PHP file inside it. After upload it, the PHP file will be placed at "themes/simpletheme/{rce}.php" from where ca…

  3. 7.5CVE-2021-37194EPSS 0.8%

    A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used)…

  4. 8.8CVE-2021-46360ExploitEPSS 9.2%

    Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrary code via uploading a PHP shell through /adminzone/index.php?page=admin-commandr.

  5. 8.8CVE-2022-24676EPSS 1.5%

    update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive.

  6. 6.5CVE-2021-24947ExploitEPSS 3.1%

    The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF checks and validation of the rvm_upload_regions_file_path parameter in the rvm_import_regions AJAX action, allowing any authenticated user, such as subscriber, …

  7. 5.4CVE-2022-0472EPSS 0.8%

    Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9.

  8. 9.8CVE-2022-23329EPSS 14%

    A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.

  9. 8.8CVE-2022-24262EPSS 1.8%

    The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the web root.

  10. 9.8CVE-2021-46428EPSS 3.2%

    A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 ( and previous versions via the bot_avatar parameter in SystemSettings.php.

  11. 8.8CVE-2021-46097EPSS 2.3%

    Dolphinphp v1.5.0 contains a remote code execution vulnerability in /application/common.php#action_log

  12. 9.8CVE-2021-46386EPSS 3.1%

    File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to net.mingsoft.basic.action.web.FileAction#upload.

  13. 7.2CVE-2021-46116EPSS 2.2%

    jpress 4.2.0 is vulnerable to remote code execution via io.jpress.web.admin._TemplateController#doInstall. The admin panel provides a function through which attackers can install templates and inject some malicious code.

  14. 7.2CVE-2021-46115EPSS 1.1%

    jpress 4.2.0 is vulnerable to RCE via io.jpress.web.admin._TemplateController#doUploadFile. The admin panel provides a function through which attackers can upload templates and inject some malicious code.

  15. 8.8CVE-2021-44123EPSS 2.4%

    SPIP 4.0.0 is affected by a remote command execution vulnerability. To exploit the vulnerability, an attacker must craft a malicious picture with a double extension, upload it and then click on it to execute it.

  16. 4.3CVE-2022-23026EPSS 0.7%

    On BIG-IP ASM & Advanced WAF version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x, an authenticated user with low privileges, such as a guest, can upload data using an undisclo…

  17. 9.8CVE-2021-46033EPSS 1.2%

    In ForestBlog, as of 2021-12-28, File upload can bypass verification.

  18. 8.8CVE-2021-46113EPSS 3.1%

    In MartDevelopers KEA-Hotel-ERP open source as of 12-31-2021, a remote code execution vulnerability can be exploited by uploading PHP files using the file upload vulnerability in this service.

  19. 9.8CVE-2022-23315EPSS 1.8%

    MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do.

  20. 9.8CVE-2022-22929EPSS 2.6%

    MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbitrary code via a crafted ZIP file.

  21. 8.8CVE-2021-45808EPSS 1.3%

    jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server.

  22. 9.8CVE-2021-46013EPSS 3.5%

    An unrestricted file upload vulnerability exists in Sourcecodester Free school management software 1.0. An attacker can leverage this vulnerability to enable remote code execution on the affected web server. Once a php webshell containing …

  23. 7.8CVE-2022-0263EPSS 1.1%

    Unrestricted Upload of File with Dangerous Type in Packagist pimcore/pimcore prior to 10.2.7.

  24. 7.2CVE-2021-41550EPSS 1.0%

    Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code.

  25. 9.8CVE-2021-38697EPSS 2.7%

    SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead to arbitrary code execution.

  26. 7.2CVE-2022-0242EPSS 1.4%

    Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.

  27. 8.8CVE-2021-33828EPSS 1.2%

    The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (that have been uploaded to a public share) are supposed to be deleted upon detection.

  28. 8.8CVE-2021-34997EPSS 4.2%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be …

  29. 8.8CVE-2021-34995EPSS 69%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be …

  30. 9.8CVE-2021-45411EPSS 3.9%

    In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote code execution.

  31. 8.8CVE-2021-44651EPSS 5.3%

    Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings component due to an improper security patch for CVE-2021-40175.

  32. 8.8CVE-2021-4080EPSS 1.5%

    crater is vulnerable to Unrestricted Upload of File with Dangerous Type

  33. 8.8CVE-2021-43973EPSS 1.8%

    An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to upload an arbitrary file via the file parameter in the HTTP POST body. A successful request returns the abs…

  34. 7.2CVE-2021-46079EPSS 3.4%

    An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection.

  35. 4.8CVE-2021-46078EPSS 1.3%

    An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability.

  36. 8.8CVE-2021-46076EPSS 3.4%

    Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution.

  37. 9.8CVE-2021-44031EPSS 2.2%

    An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx contains a vulnerability that could allow pre-authentication remote code execution. An attacker coul…

  38. 7.5CVE-2021-24981EPSS 0.8%

    The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins directory.

  39. 7.2CVE-2021-35244EPSS 6.0%

    The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an un…

  40. 9.8CVE-2021-44164EPSS 2.1%

    Chain Sea ai chatbot system’s file upload function has insufficient filtering for special characters in URLs, which allows a remote attacker to by-pass file type validation, upload malicious script and execute arbitrary code without authen…

  41. 9.8CVE-2021-44159EPSS 3.5%

    4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system oper…

  42. 8.8CVE-2021-23814EPSS 1.8%

    This affects versions of the package unisharp/laravel-filemanager before 2.6.2. The upload() function does not sufficiently validate the file type when uploading. An attacker may be able to reproduce the following steps: 1. Install a pac…

  43. 9.8CVE-2021-41560EPSS 11%

    OpenCATS through 0.9.6 allows remote attackers to execute arbitrary code by uploading an executable file via lib/FileUtility.php.

  44. 8.8CVE-2021-41870EPSS 1.1%

    An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can bypass a client-side file-type check and upload arbitrary .php files.

  45. 8.8CVE-2021-43829EPSS 59%

    PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.7.7 PatrowlManager unrestrictly handle upload files in the findings import feature. This vulnerability is capable of uploading dangero…

  46. 9.8CVE-2021-40883EPSS 3.1%

    A Remote Code Execution (RCE) vulnerability exists in emlog 5.3.1 via content/plugins.

  47. 9.8CVE-2021-43117EPSS 2.2%

    fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access.

  48. 8.1CVE-2021-27984EPSS 2.6%

    In Pluck-4.7.15 admin background a remote command execution vulnerability exists when uploading files.

  49. 8.8CVE-2021-36719EPSS 1.1%

    PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system. The attacker exploits the vulnerable nicUpload.php file to upload a malicious file,Thus taking over the server and running remote code.

  50. 8.8CVE-2021-27860KEVEPSS 40%

    A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The Fat…