Description
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize \'.../...//\' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.
Latest vulnerabilities for CWE-35
No vulnerabilities found using your search criteria
References
Description of CWE-35 on Mitre website