Description
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize \'dir\\..\\..\\filename\' (multiple internal backslash dot dot) sequences that can resolve to a location that is outside of that directory.
Latest vulnerabilities for CWE-31
No vulnerabilities found using your search criteria
References
Description of CWE-31 on Mitre website