EIP-2026-102468

This advisory describes a directory traversal vulnerability in Cloupia's jQuery File Tree implementation, allowing unauthenticated remote attackers to browse the host server's file system. The provided code snippet is a JSP connector for jQuery File Tree, which lacks proper input validation on the 'dir' parameter.