CWE-44 (路径等价：’file.name’ (内部点号)) — Vulnerability Class 1

CWE-44 is a path traversal weakness occurring when software accepts file paths containing internal dots without proper validation. This flaw allows attackers to manipulate input strings, such as "file.name," to bypass intended access controls and traverse the directory structure to reach sensitive or unintended files. By exploiting ambiguous path resolution mechanisms, malicious actors can read, modify, or delete critical system resources outside the expected scope. To mitigate this risk, developers must implement strict input validation that sanitizes all user-supplied path components. Utilizing canonicalization functions to resolve paths to their absolute form before comparison ensures consistency. Additionally, employing allowlists for permitted file extensions and restricting access to specific directories further prevents unauthorized traversal, thereby securing the application against these ambiguous resolution attacks.