cve.bz

CWE-53: Path Equivalence: '\multiple\\internal\backslash'

Filter

The product accepts path input in the form of multiple internal backslash ('\multiple\trailing\\slash') without appropriate validation, which can lead to ambiguous path resolution and allow an attacker to traverse the file system to unintended locations or access arbitrary files.

What the weakness is: CWE-53 at MITRE. All weaknesses

Ask an AI about CWE-53

Show the promptExplain CWE-53: Path Equivalence: '\multiple\\internal\backslash' and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/53.html and https://cve.bz/cve/cwe/53?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

No records match.