5 lines
377 B
Plaintext
5 lines
377 B
Plaintext
|
Applications behave as filesystem oracles when they disclose to attackers if resources from the filesystem exist or not.
|
||
|
|
|
||
|
|
A user with malicious intent would inject specially crafted values, such as ``++../++``, to change the initially intended path. The resulting path would resolve to a location somewhere in the filesystem which the user should not normally have access to.
|
||
|
|
|