CWE-65
Windows Hard Link
The product, when opening a file or directory, does not sufficiently handle when the name is associated with a hard link to a target that is outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.
Impactr finds and proves whether CWE-65 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.