Description
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize \"../\" sequences that can resolve to a location that is outside of that directory.
Latest vulnerabilities for CWE-24
No vulnerabilities found using your search criteria
References
Description of CWE-24 on Mitre website