This page is experimental and may change significantly in future releases.
Path Traversal: '....//'
Properties
id: d3f:CWE-34
- name
- Path Traversal: '....//'
- definition
- The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '....//' (doubled dot dot slash) sequences that can resolve to a location that is outside of that directory.
Neighbors
CWE-34 has no direct neighbors in this release.Inferred Relationships
Related Countermeasure Techniques
Related Weaknesses
CWE-34 has no related weaknesses in this release.