realistic (or portable). In conjunction with the path traversal (CWE-22) through lines
2/4/6, a local user could launch a symbolic link attack (CWE-61) against the .dat file in
order to access any file that is readable by Bug Barrel, but not by the local user. Thus
the absence of a suitable protection mechanism for file containment effectively becomes