cve.bz

CWE-45: Path Equivalence: 'file...name' (Multiple Internal Dot)

Filter

The product accepts path input in the form of multiple internal dot ('file...dir') without appropriate validation, which can lead to ambiguous path resolution and allow an attacker to traverse the file system to unintended locations or access arbitrary files.

What the weakness is: CWE-45 at MITRE. All weaknesses

Ask an AI about CWE-45

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-45: Path Equivalence: 'file...name' (Multiple Internal Dot) and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/45.html and https://cve.bz/cve/cwe/45?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

No records match.