CWE-59: Improper Link Resolution Before File Access ('Link Following')
BaseDraftExploit Likelihood: Medium
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
View on MITREBack to CWE Lookup
Technical Details
- Structure
- Simple
Applicable To
Not Language-Specific
WindowsUnix