关键信息 CWE ID CWE-36: Absolute Path Traversal 描述 描述: 这种漏洞允许攻击者通过提供绝对路径来访问文件系统中的任意文件，即使这些文件位于受限制的目录之外。 影响 影响: - 机密性: 攻击者可以读取敏感文件。 - 完整性: 攻击者可能修改或删除关键文件。 - 可用性: 攻击者可能破坏应用程序的正常运行。 潜在缓解措施 缓解措施: - 验证输入: 对用户输入进行严格验证和清理。 - 使用相对路径: 使用相对路径而不是绝对路径。 - 权限管理: 确保文件和目录的适当权限设置。 示例代码 示例1: 示例2: 相关CWEs 相关CWEs: CWE-22, CWE-34, CWE-78, CWE-94, CWE-434, CWE-502, CWE-59, CWE-73, CWE-74, CWE-98, CWE-110, CWE-200, CWE-209, CWE-220, CWE-252, CWE-253, CWE-254, CWE-255, CWE-256, CWE-257, CWE-258, CWE-259, CWE-260, CWE-264, CWE-265, CWE-266, CWE-267, CWE-268, CWE-269, CWE-270, CWE-271, CWE-272, CWE-273, CWE-274, CWE-275, CWE-276, CWE-277, CWE-278, CWE-279, CWE-280, CWE-281, CWE-282, CWE-283, CWE-284, CWE-285, CWE-286, CWE-287, CWE-288, CWE-289, CWE-290, CWE-291, CWE-292, CWE-293, CWE-294, CWE-295, CWE-296, CWE-297, CWE-298, CWE-299, CWE-300, CWE-301, CWE-302, CWE-303, CWE-304, CWE-305, CWE-306, CWE-307, CWE-308, CWE-309, CWE-310, CWE-311, CWE-312, CWE-313, CWE-314, CWE-315, CWE-316, CWE-317, CWE-318, CWE-319, CWE-320, CWE-321, CWE-322, CWE-323, CWE-324, CWE-325, CWE-326, CWE-327, CWE-328, CWE-329, CWE-330, CWE-331, CWE-332, CWE-333, CWE-334, CWE-335, CWE-336, CWE-337, CWE-338, CWE-339, CWE-340, CWE-341, CWE-342, CWE-343, CWE-344, CWE-345, CWE-346, CWE-347, CWE-348, CWE-349, CWE-350, CWE-351, CWE-352, CWE-353, CWE-354, CWE-355, CWE-356, CWE-357, CWE-358, CWE-359, CWE-360, CWE-361, CWE-362, CWE-363, CWE-364, CWE-365, CWE-366, CWE-367, CWE-368, CWE-369, CWE-370, CWE-371, CWE-372, CWE-373, CWE-374, CWE-375, CWE-376, CWE-377, CWE-378, CWE-379, CWE-380, CWE-381, CWE-382, CWE-383, CWE-384, CWE-385, CWE-386, CWE-387, CWE-388, CWE-389, CWE-390, CWE-391, CWE-392, CWE-393, CWE-394, CWE-395, CWE-396, CWE-397, CWE-398, CWE-399, CWE-400, CWE-401, CWE-402, CWE-403, CWE-404, CWE-405, CWE-406, CWE-407, CWE-408, CWE-409, CWE-410, CWE-411, CWE-412, CWE-413, CWE-414, CWE-415, CWE-416, CWE-417, CWE-418, CWE-419, CWE-420, CWE-421, CWE-422, CWE-423, CWE-424, CWE-425, CWE-426, CWE-427, CWE-428, CWE-429, CWE-430, CWE-431, CWE-432, CWE-433, CWE-434, CWE-435, CWE-436, CWE-437, CWE-438, CWE-439, CWE-440, CWE-441, CWE-442, CWE-443, CWE-444, CWE-445, CWE-446, CWE-447, CWE-448, CWE-449, CWE-450, CWE-451, CWE-452, CWE-453, CWE-454, CWE-455, CWE-456, CWE-457, CWE-458, CWE-459, CWE-460, CWE-461, CWE-462, CWE-463, CWE-464, CWE-465, CWE-466, CWE-467, CWE-468, CWE-469, CWE-470, CWE-471, CWE-472, CWE-473, CWE-474, CWE-475, CWE-476, CWE-477, CWE-478, CWE-479, CWE-480, CWE-481, CWE-482, CWE-483, CWE-484, CWE-485, CWE-486, CWE-487, CWE-488, CWE-489, CWE-490, CWE-491, CWE-492, CWE-493, CWE-494, CWE-495, CWE-496, CWE-497, CWE-498, CWE-499, CWE-500, CWE-501, CWE-502, CWE-503, CWE-504, CWE-505, CWE-506, CWE-507, CWE-508, CWE-509, CWE-510, CWE-511, CWE-512, CWE-513, CWE-514, CWE-515, CWE-516, CWE-517, CWE-518, CWE-519, CWE-520, CWE-521, CWE-522, CWE-523, CWE-524, CWE-525, CWE-526, CWE-527, CWE-528, CWE-529, CWE-530, CWE-531, CWE-532, CWE-533, CWE-534, CWE-535, CWE-536, CWE-537, CWE-538, CWE-539, CWE-540, CWE-541, CWE-542, CWE-543, CWE-544, CWE-545, CWE-546, CWE-547, CWE-548, CWE-549, CWE-550, CWE-551, CWE-552, CWE-553, CWE-554, CWE-555, CWE-556, CWE-557, CWE-558, CWE-559, CWE-560, CWE-561, CWE-562, CWE-563, CWE-564, CWE-565, CWE-566, CWE-567, CWE-568, CWE-569, CWE-570, CWE-571, CWE-572, CWE-573, CWE-574, CWE-575, CWE-576, CWE-577, CWE-578, CWE-579, CWE-580, CWE-581, CWE-582, CWE-583, CWE-584, CWE-585, CWE-586, CWE-587, CWE-588, CWE-589, CWE-590, CWE-591, CWE-592, CWE-593, CWE-594, CWE-595, CWE-596, CWE-597, CWE-598, CWE-599, CWE-600, CWE-601, CWE-602, CWE-603, CWE-604, CWE-605, CWE-606, CWE-607, CWE-608, CWE-609, CWE-610, CWE-611, CWE-612, CWE-613, CWE-614, CWE-615, CWE-616, CWE-617, CWE-618, CWE-619, CWE-620, CWE-621, CWE-622, CWE-623, CWE-624, CWE-625, CWE-626, CWE-627, CWE-628, CWE-629, CWE-630, CWE-631, CWE-632, CWE-633, CWE-634, CWE-635, CWE-636, CWE-637, CWE-638, CWE-639, CWE-640, CWE-641, CWE-642, CWE-643, CWE-644, CWE-645, CWE-646, CWE-647, CWE-648, CWE-649, CWE-650, CWE-651, CWE-652, CWE-653, CWE-654, CWE-655, CWE-656, CWE-657, CWE-658, CWE-659, CWE-660, CWE-661, CWE-662, CWE-663, CWE-664, CWE-665, CWE-666, CWE-667, CWE-668, CWE-669, CWE-670, CWE-671, CWE-672, CWE-673, CWE-674, CWE-675, CWE-676, CWE-677, CWE-678, CWE-679, CWE-680, CWE-681, CWE-682, CWE-683, CWE-684, CWE-685, CWE-686, CWE-687, CWE-688, CWE-689, CWE-690, CWE-691, CWE-692, CWE-693, CWE-694, CWE-695, CWE-696, CWE-697, CWE-698, CWE-699, CWE-700, CWE-701, CWE-702, CWE-703, CWE-704, CWE-705, CWE-706, CWE-707, CWE-708, CWE-709, CWE-710, CWE-711, CWE-712, CWE-713, CWE-714, CWE-715, CWE-716, CWE-717, CWE-718, CWE-719, CWE-720, CWE-721, CWE-722, CWE-723, CWE-724, CWE-725, CWE-726, CWE-727, CWE-728, CWE-729, CWE-730, CWE-731, CWE-732, CWE-733, CWE-734, CWE-735, CWE-736, CWE-737, CWE-738, CWE-739, CWE-740, CWE-741, CWE-742, CWE-743, CWE-744, CWE-745, CWE-746, CWE-747, CWE-748, CWE-749, CWE-750, CWE-751, CWE-752, CWE-753, CWE-754, CWE-755, CWE-756, CWE-757, CWE-758, CWE-759, CWE-760, CWE-761, CWE-762, CWE-763, CWE-764, C