This page is experimental and may change significantly in future releases.
Path Traversal: 'dir\..\..\filename'
Properties
id: d3f:CWE-31
- name
- Path Traversal: 'dir\..\..\filename'
- definition
- The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize 'dir\..\..\filename' (multiple internal backslash dot dot) sequences that can resolve to a location that is outside of that directory.
Neighbors
CWE-31 has no direct neighbors in this release.Inferred Relationships
Related Countermeasure Techniques
Related Weaknesses
CWE-31 has no related weaknesses in this release.