CAPEC-597 Absolute Path Traversal

Abstraktion: detailedStatus: active

An adversary with access to file system resources, either directly or via application logic, will use various file absolute paths and navigation mechanisms such as ".." to extend their range of access to inappropriate areas of the file system. The goal of the adversary is to access directories and files that are intended to be restricted from their access.

01

Schwächen (1)

Die CWE-Schwächeklassen, zu denen dies gehört.

02

verwandte Angriffsmuster (1)

Verwandte Einträge.

03

Quelle

Wo diese Definition veröffentlicht ist.