CWE-66

Improper Handling of File Names that Identify Virtual Resources

The product does not handle or incorrectly handles a file name that identifies a "virtual" resource that is not directly specified within the directory that is associated with the file name, causing the product to perform file-based operations on a resource that is not a file.

No mitigation information available for this CWE.

No CAPEC attack patterns related to this CWE.

Back to CWE stats page