CWE-23 Blogs | Code2Night.com

Blog results for Tags - #CWE 23

How to fix CWE-23 Path Traversal vulnerability (Snyk)

Hello guys, in this article we will see how to fix CWE-23 Path Traversal vulnerability Unsanitized input from an HTTP parameter flows into global::System.IO.Directory.CreateDirectory, where it is used as a path. This may result in a Path Traversal vulnerability and allow an attacker to create arbitrary directories when we scan our code with snyk.