Common Weakness Enumeration
CWE-57 Path Equivalence: 'fakedir/../realdir/filename'
Description
The product contains protection mechanisms to restrict access to 'realdir/filename', but it constructs pathnames using external input in the form of 'fakedir/../realdir/filename' that are not handled by those mechanisms. This allows attackers to perform unauthorized actions against the targeted file.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-57 ordered by modification date.
No Reviewed Advisories Found
There are no reviewed OSV records mapped to this CWE at this time.