BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsidesluxembourg-2025//talk//JUFKPL
BEGIN:VTIMEZONE
TZID:Europe/Paris
BEGIN:DAYLIGHT
DTSTART:20240619T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20241027T030000
RDATE:20251026T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20250330T030000
RDATE:20260329T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:From Unrestricted Uploads to Security Nightmares: Preventing and M
 itigating File Upload Vulnerabilities - Sewar Khalifeh
DTSTART;TZID=Europe/Paris:20250619T111500
DTEND;TZID=Europe/Paris:20250619T115500
DTSTAMP:20261006T030921Z
UID:pretalx-bsidesluxembourg-2025-JUFKPL@pretalx.com
DESCRIPTION:Unrestricted file uploads pose a significant threat to applica
 tion security\, allowing attackers to exploit various vulnerabilities and 
 gain unauthorised access to systems and data. And there are some potential
  risks associated with unrestricted file uploads\, such as: Triggering vul
 nerabilities in libraries/applications\, abusing real-time security tools
 \, executing malicious code and unauthorised access to sensitive files. In
  addition to the standard security best practices for file uploads\, such 
 as restricting file size\, types\, and extensions\; experts recommends sec
 urity controls to further enhance protection and validate files. These tec
 hnologies include Content Disarm and Reconstruction (CDR)\, multi-AV scann
 ing\, sandboxing\, and single-AV scanning. The aim of this presentation is
  to provide a detailed walkthrough of the risks and attacks associated wit
 h unrestricted file upload vulnerabilities\, review the protective technol
 ogies available\, outline proper mitigation strategies\, and give practica
 l examples on how to secure your environment against malicious uploads.
LOCATION:Main Stage
URL:https://pretalx.com/bsidesluxembourg-2025/talk/JUFKPL/
END:VEVENT
END:VCALENDAR