• Online, Self-Paced
Course Description

Many file operations are intended to take placed within a restricted directory, however, the software does not properly neutralize special elements within a pathname which results in various security consequences. This course introduces ways to identify and mitigate this security weakness, referenced as CWE-22 by the 2020 CWE Top 25.

Learning Objectives

On successful completion of this course, learners should have the knowledge and skills to:

  • Identify Path Traversal vulnerabilities
  • Recognize the potential impact of this vulnerability
  • Apply coding best practices to avoid attacks
  • Find Path Traversal vulnerabilities in your applications source code
  • Test your application to detect Path Traversal

 

Framework Connections

The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.