CWE-59: insecure temporary file

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.

A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.

From the CWE List. © The MITRE Corporation.