This page is experimental and may change significantly in future releases.
Relative Path Traversal
Properties
id: d3f:CWE-23
- name
- Relative Path Traversal
- definition
- The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
- synonyms
- Zip Slip
Neighbors
CWE-23 has no direct neighbors in this release.