117
The product, when opening a file or directory, does not sufficiently account for when the file is a
symbolic link that resolves to a target outside of the intended control sphere. This could allow an
attacker to cause the product to operate on unauthorized files.
Composite Components
Nature Type ID Name Page
Requires 362 Concurrent Execution using Shared Resource with Improper
Synchronization ('Race Condition')