CWE-25

• CWE ID
• 25

• CWE Name
• Path Traversal: '/../filedir'

• CWE Abstraction
• Variant

• CWE structure
• Simple

• CWE Status
• Incomplete

The software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize "/../" sequences that can resolve to a location that is outside of that directory.