4. CWE-601 : URL Redirection to Untrusted Site ('Open Redirect')
5. CWE-22 : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
6. CWE-829 : Inclusion of Functionality from Untrusted Control Sphere
MIT-3 Use a language that does not allow this weakness to occur or provides constructs that make this weakness