CWE-59
Improper Link Resolution Before File Access ('Link Following')
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Impactr finds and proves whether CWE-59 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.