Cyber Resilience

CWE · MITRE source

CWE-434Unrestricted Upload of File with Dangerous Type

Abstraction: Base · CVEs in our corpus: 4,145

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Last updated: 04 July 2026 00:28 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: mostly · 6 mapping(s) from 3 framework(s): ATT&CK 4 (mostly) · OWASP-Web 1 (mostly) · ASVS 5.0 1 (partial)

See the full cumulative-coverage rollup →

OWASP Top 10 for Web (2025)

This weakness contributes to A06:2025 Insecure Design.

NIST 800-53 r5 controls that address this weakness (4)AI

Control Title Family Why it addresses this CWE
SC-44Detonation ChambersSCDangerous file uploads can be detonated in the chamber to determine malice before any production write or execution occurs.
SC-51Hardware-based ProtectionSCPrevents unrestricted writing of arbitrary or malicious firmware by keeping hardware write-protect enabled except under tightly controlled manual procedures.
MP-7Media UseMPRequiring identifiable owners for portable devices reduces the attack surface for unrestricted uploads of dangerous file types via anonymous media.
SI-3Malicious Code ProtectionSIScans files from external sources on download/open/execute, blocking unrestricted uploads of dangerous file types.

MITRE ATT&CK techniques this weakness enables

Our own two-way CWE↔ATT&CK cross-walk — a direct mapping with no public source (the CWE→CAPEC→ATT&CK chain leaves most top weaknesses, incl. XSS and SQLi, mapped to nothing). Drafted by Grok and spot-checked by Claude Opus 4.8.

Direction: ← other covers this; → this covers other (F/M/P = full / mostly / partial).

T1059 Command and Scripting Interpreter←P →PT1105 Ingress Tool Transfer→PT1190 Exploit Public-Facing Application←M →PT1505 Server Software Component←P →MT1505.003 Web Shell←M →M

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2016-3088 KEV10.09.80.98522016-06-01
CVE-2017-11357 KEV10.09.80.75712017-08-23
CVE-2017-12615 KEV10.08.10.99612017-09-19
CVE-2017-12617 KEV10.08.10.99992017-10-04
CVE-2018-15961 KEV10.09.80.99952018-09-25
CVE-2019-8394 KEV10.06.50.64052019-02-17
CVE-2018-4063 KEV10.08.80.28062019-05-06
CVE-2020-25213 KEV10.010.00.97332020-09-09
CVE-2020-8260 KEV10.07.20.96482020-10-28
CVE-2020-13671 KEV10.08.80.04272020-11-20
CVE-2021-20022 KEV10.07.20.16512021-04-09
CVE-2021-31207 KEV10.06.60.99782021-05-11
CVE-2021-26828 KEV10.08.80.39102021-06-11
CVE-2021-36741 KEV10.08.80.04952021-07-29
CVE-2021-27860 KEV10.09.80.39822021-12-08
CVE-2024-7399 KEV10.08.80.91942024-08-12
CVE-2024-7694 KEV10.07.20.01812024-08-12
CVE-2024-39717 KEV10.07.20.04012024-08-22
CVE-2024-50623 KEV10.09.80.98532024-10-28
CVE-2024-57968 KEV10.09.90.30482025-02-03
CVE-2025-2749 KEV10.07.20.03852025-03-24
CVE-2025-31324 KEV UPD10.010.00.99362025-04-24
CVE-2025-52691 KEV10.010.00.85462025-12-29
CVE-2017-90808.08.80.62312017-05-19
CVE-2017-91018.09.80.76742017-05-21