EIP-2026-100382

This advisory details a file disclosure vulnerability in JSFTemplating, Mojarra Scales, and GlassFish Application Server v3 Admin console, allowing attackers to read sensitive files and directory listings via crafted HTTP requests. The vulnerability is due to improper input validation in the FileStreamer/PhaseListener component.