CWE Definition / CWE-38

CWE-38: Path Traversal: 'absolutepathnamehere'

The product accepts input in the form of a backslash absolute path ('absolutepathnamehere') without appropriate validation, which can allow an attacker to traverse the file system to unintended locations or access arbitrary files.