BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsidesluxembourg-2025//speaker//QAZPDF
BEGIN:VTIMEZONE
TZID:Europe/Paris
BEGIN:DAYLIGHT
DTSTART:20240619T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20241027T030000
RDATE:20251026T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20250330T030000
RDATE:20260329T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:From Unrestricted Uploads to Security Nightmares: Preventing and M
 itigating File Upload Vulnerabilities - Sewar Khalifeh
DTSTART;TZID=Europe/Paris:20250619T111500
DTEND;TZID=Europe/Paris:20250619T115500
DTSTAMP:20260907T085849Z
UID:pretalx-bsidesluxembourg-2025-JUFKPL@pretalx.com
DESCRIPTION:Unrestricted file uploads pose a significant threat to applica
 tion security\, allowing attackers to exploit various vulnerabilities and 
 gain unauthorised access to systems and data. And there are some potential
  risks associated with unrestricted file uploads\, such as: Triggering vul
 nerabilities in libraries/applications\, abusing real-time security tools\
 , executing malicious code and unauthorised access to sensitive files. In 
 addition to the standard security best practices for file uploads\, such a
 s restricting file size\, types\, and extensions\; experts recommends secu
 rity controls to further enhance protection and validate files. These tech
 nologies include Content Disarm and Reconstruction (CDR)\, multi-AV scanni
 ng\, sandboxing\, and single-AV scanning. The aim of this presentation is 
 to provide a detailed walkthrough of the risks and attacks associated with
  unrestricted file upload vulnerabilities\, review the protective technolo
 gies available\, outline proper mitigation strategies\, and give practical
  examples on how to secure your environment against malicious uploads.
LOCATION:Main Stage
URL:https://pretalx.com/bsidesluxembourg-2025/talk/JUFKPL/
END:VEVENT
END:VCALENDAR