CWE-58
Path Equivalence: Windows 8.3 Filename
The product contains a protection mechanism that restricts access to a long filename on a Windows operating system, but it does not properly restrict access to the equivalent short 8.3 filename.
Impactr finds and proves whether CWE-58 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.