EIP-2026-102532

The vulnerability involves improper sanitization of the 'file' parameter in Resin Application Server 4.0.36, allowing attackers to disclose source code of files like '.jsp' by manipulating the parameter. The advisory provides specific URLs demonstrating the exploit, including path traversal techniques.