CWE-44

Variant Abstraction Level
Pillar — Highest-level weakness category
Class — Abstract, language-independent
Base — Specific enough to detect
Variant — Tied to specific technology
Compound — Requires multiple weaknesses Incomplete MITRE CWE Status
Stable — Fully reviewed and complete
Draft — Under development, may change
Incomplete — Partially defined by MITRE
Deprecated — No longer recommended
Obsolete — Replaced by another CWE
Path Equivalence: 'file.name' (Internal Dot)

Description

The product accepts path input in the form of internal dot ('file.ordir') without appropriate validation, which can lead to ambiguous path resolution and allow an attacker to traverse the file system to unintended locations or access arbitrary files.

Top Monitored CVEs

CVE-2025-24813
CRITICAL KEV
9.8 99.9%
2025-03-10

Consequences

Confidentiality, Integrity — Read Files or Directories, Modify Files or Directories