Common Weakness Enumeration

    CWE Definition / CWE-41

    CWE-41: Improper Resolution of Path Equivalence

    The product is vulnerable to file system contents disclosure through path equivalence. Path equivalence involves the use of special characters in file and directory names. The associated manipulations are intended to generate multiple names for the same object.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-706: Use of Incorrectly-Resolved Name or Reference

    CWE-863: Incorrect Authorization

    CWE-1390: Weak Authentication