CWE-249
DEPRECATED: Often Misused: Path Manipulation
This entry has been deprecated because of name confusion and an accidental combination of multiple weaknesses. Most of its content has been transferred to CWE-785.
Impactr finds and proves whether CWE-249 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.