CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of th…
Vulnerabilities
How this weakness shows up in real applications — how it works, impact, and remediation:
Impactr finds and proves whether CWE-22 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.