CWE-785
Use of Path Manipulation Function without Maximum-sized Buffer
The product invokes a function for normalizing paths or file names, but it provides an output buffer that is smaller than the maximum possible size, such as PATH_MAX.
Impactr finds and proves whether CWE-785 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.