Path PathTraversal

The application dynamically constructs file or path information. If the path information comes from user input, it could be abused to read sensitive files, access other users data, or aid in exploitation to gain further system access. User input should never be used in constructing paths or files for interacting with the filesystem. This includes filenames s

IndexedPublic repositoryMediumHigh confidenceVerifiedMITC#
greprules fetch gitlab-sast-csharp-path-rule-pathtraversal --engine opengrep

Description

The application dynamically constructs file or path information. If the path information comes from user input, it could be abused to read sensitive files, access other users data, or aid in exploitation to gain further system access. User input should never be used in constructing paths or files for interacting with the filesystem. This includes filenames s