Path Traversal
High · File Access · CWE-22
Description
../ sequences access files outside intended directory.
Root cause
Using user input in file paths.
Impact
Reading sensitive files.
Detection
Logs containing ../ or encoded variants.
Mitigation
Canonicalize paths and enforce a base directory.
Secure coding
Map IDs to files instead of accepting filenames.
Safe lab example
PortSwigger path traversal labs
Practise related skills in Labs or deepen on Academy library.