Study. uk . com
  1. Home
  2. All questions
  3. Question 469

CompTIA Security+ study material · question 469 of 611

A request for a report filename returns the contents of a system configuration file elsewhere on disk. Which attack is this?

  1. XML external entity injection
  2. Command injection
  3. Directory traversal
  4. Server-side request forgery
Show the answer

Answer: C. Directory traversal

The supplied path escapes the intended directory, so the application reads a file it was never meant to serve.

Source: OWASP Input Validation Cheat Sheet (OWASP) — OWASP Input Validation Cheat Sheet › File Upload Validation

Challenge yourself on this topic → Study as cards