CWE-706
Use of Incorrectly-Resolved Name or Reference
Description
The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.
The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.