CWE-40Path Traversal: '\\UNC\share\name\' (Windows UNC Share)

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID:
CWE-40
摘要:
Variant
结构:
Simple
状态:
Draft
发布日期:
2006-07-19
更新日期:
2025-12-11

名称

Path Traversal: '\\UNC\share\name\' (Windows UNC Share)

描述

The product accepts input that identifies a Windows UNC share ('\\UNC\share\name') that potentially redirects access to an unintended location or arbitrary file.

常见后果

范围:
Confidentiality, Integrity
影响:
Read Files or Directories, Modify Files or Directories

相关 CWE