CWE-39
Path Traversal: 'C:dirname'
The product accepts input that contains a drive letter or Windows volume letter ('C:dirname') that potentially redirects access to an unintended location or arbitrary file.
Impactr finds and proves whether CWE-39 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.