CWE-61
UNIX Symbolic Link (Symlink) Following
The product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.
Impactr finds and proves whether CWE-61 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.