CWE-73
External Control of File Name or Path
The product allows user input to control or influence paths or file names that are used in filesystem operations.
Impactr finds and proves whether CWE-73 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.