CWE-72
Improper Handling of Apple HFS+ Alternate Data Stream Path
The product does not properly handle special paths that may identify the data or resource fork of a file on the HFS+ file system.
Impactr finds and proves whether CWE-72 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.