CWE-62
UNIX Hard Link
The product, when opening a file or directory, does not sufficiently account for when the name is associated with a hard link to a target that is outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.
Impactr finds and proves whether CWE-62 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.