outside of the intended control sphere.
This is a high-level weakness that includes path traversal and symlink following, since the
filename can be changed to reference a file that is outside of an intended directory.
CWE-669 Incorrect Resource Transfer Between Spheres