Fortect - CWE-428: Unquoted Search Path or Element, may be used by local user to elevate privileges.
Solution:
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
Link | Tags |
---|---|
https://www.gov.il/en/Departments/faq/cve_advisories | third party advisory |