-
Sub-task
-
Resolution: Done
-
Medium
-
None
-
None
-
None
-
None
Path manipulation errors occur when the following two conditions are met:
1. An attacker is able to specify a path used in an operation on the file system.
2. By specifying the resource, the attacker gains a capability that would not otherwise be permitted.
For example, the program may give the attacker the ability to overwrite the specified file or run with a configuration controlled by the attacker.
Such as the code of File file = new File(dictionaryName);
To fix this issue: Create a validation method to validate the value of dictionaryName.