directory, which are thus outside of the intended sphere of control.
Some weaknesses related to control spheres include:
CWE-610 Externally Controlled Reference to a Resource in Another Sphere
The product uses an externally controlled name or reference that resolves to a resource that is