CWE-38—Path Traversal: '\absolute\pathname\here'

Weakness Name

Path Traversal: '\absolute\pathname\here'

Description

The product accepts input in the form of a backslash absolute path ('\absolute\pathname\here') without appropriate validation, which can allow an attacker to traverse the file system to unintended locations or access arbitrary files.

Common Consequences

Scope:

Confidentiality, Integrity

Impact:

Read Files or Directories, Modify Files or Directories

Related Weaknesses

• CWE-36Absolute Path Traversal