file-access-before-action
A check is done with access
and then the file is later used. There is no guarantee that the status of the file has not changed since the call to access
which may allow attackers to bypass permission checks.
Likelihood: LOW
Confidence: HIGH
CWE:
- CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition