CWE-41 - CERT CVE

CWE-41 - Improper Resolution of Path Equivalence

The system or application is vulnerable to file system contents disclosure through path equivalence. Path equivalence involves the use of special characters in file and directory names. The associated manipulations are intended to generate multiple names for the same object.

CAPEC ID Naziv
CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters