file-access-before-action
file-access-before-action
A check is done with
Likelihood: LOW
Confidence: HIGH
CWE:
- CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
access and then the file is later used. There is no guarantee that the status of the file has not changed since the call to access which may allow attackers to bypass permission checks.Likelihood: LOW
Confidence: HIGH
CWE:
- CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition