The software uses external input to construct a pathname that is intended to identify a file or directory below a restricted parent directory, but does not properly neutralize special elements that can cause the pathname to resolve to a location outside of that directory.
CWE-22 (Path Traversal) is classified as high severity and falls under the OWASP Top 10 category A01:2021.
The official CWE entry is maintained by MITRE at cwe.mitre.org/data/definitions/22.html.
Orbis AppSec automatically detects and fixes Path Traversal vulnerabilities in your code with AI-powered static analysis.