CWE-363
Race Condition Enabling Link Following
The product checks the status of a file or directory before accessing it, which produces a race condition in which the file can be replaced with a link before the access is performed, causing the product to access the wrong file.
Impactr finds and proves whether CWE-363 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.