Filesystem path, filename, or URI manipulation

An attacker may access, modify, or corrupt files that contain sensitive information or are critical to the application. A user-controllable string is used as part or all of a filesystem path, filename, or URI (uniform resource identifier).