DetailedDraft
CAPEC-597Absolute Path Traversal
Abstraction
Detailed
Status
Draft
Description
An adversary with access to file system resources, either directly or via application logic, will use various file absolute paths and navigation mechanisms such as ".." to extend their range of access to inappropriate areas of the file system. The goal of the adversary is to access directories and files that are intended to be restricted from their access.
Related weaknesses· 1
Related attack patterns· 1
Exploits1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Absolute Path Traversalcwe-36 | 100% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.