CWE-434 Unrestricted Upload of File with Dangerous Type
baseThe product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (5022)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-56291US | critical9.8OT critical | KEV | ||
Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary f… | ||||
| CVE-2026-56290US | critical9.8OT critical | KEV | ||
Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitra… | ||||
| CVE-2026-48939US | critical9.8OT critical | KEV | ||
A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution. | ||||
| CVE-2026-48908US | critical9.8OT critical | KEV | ||
A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code. | ||||
| CVE-2025-52691US | —OT critical | KEV | ||
Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code… | ||||
| CVE-2025-31324US | critical9.8OT critical | KEV | ||
SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries tha… | ||||
| CVE-2025-2749US | —OT critical | KEV | ||
An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations. This results in path… | ||||
| CVE-2024-57968US | high8.8OT critical | KEV | ||
Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users). up… | ||||
| CVE-2024-50623US | critical9.8OT critical | KEV | ||
In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution. | ||||
| CVE-2024-39717US | high7.2OT critical | KEV | ||
The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with Provider-Data-Center-Admin or P… | ||||
| CVE-2024-7262US | high7.8OT critical | KEV | ||
Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arb… | ||||
| CVE-2024-7694US | —OT critical | KEV | ||
ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload… | ||||
| CVE-2024-7399US | critical9.8OT critical | KEV | ||
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system au… | ||||
| CVE-2023-36847US | medium5.3OT critical | KEV | ||
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to… | ||||
| CVE-2023-36846US | medium5.3OT critical | KEV | ||
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to… | ||||
| CVE-2022-41352US | critical9.8OT critical | KEV | ||
An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/web… | ||||
| CVE-2022-27925US | high7.2OT critical | KEV | ||
Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights h… | ||||
| CVE-2022-29464US | critical9.8OT critical | KEV | ||
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory travers… | ||||
| CVE-2022-26871US | critical9.8OT critical | KEV | ||
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execut… | ||||
| CVE-2021-27860US | high8.8OT critical | KEV | ||
A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker… | ||||
03
attack patterns (1)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan