EIP-2026-102455

The code describes an XPath injection vulnerability in Apache JackRabbit's search.jsp file, where the HTTP GET parameter 'q' is included in an XPath query without sanitization if it starts with 'related:'. This could allow an attacker to manipulate the XPath query.