Weakness
Path traversal
Using ../ tricks in a file name to read or write files outside the intended folder.
If an application builds file paths from user input, sequences like ../../ can climb out of the intended directory to reach configuration files, credentials or, when writing is possible, places where a file becomes code.
Path traversal in the news
Recent stories that mention it.
The weakness behind it
Its CWE entry, with CVEs in the news, attacker techniques and the controls that stop it.
Related
Plain-language explainers written by SecurityTabs, matched to stories by name. All terms