This page is experimental and may change significantly in future releases.
Path Equivalence: 'filedir*' (Wildcard)
Properties
id: d3f:CWE-56
- name
- Path Equivalence: 'filedir*' (Wildcard)
- definition
- The product accepts path input in the form of asterisk wildcard ('filedir*') without appropriate validation, which can lead to ambiguous path resolution and allow an attacker to traverse the file system to unintended locations or access arbitrary files.
Neighbors
CWE-56 has no direct neighbors in this release.Inferred Relationships
Related Countermeasure Techniques
Related Weaknesses
CWE-56 has no related weaknesses in this release.