EIP-2026-103782

This JavaScript code demonstrates an SSRF (Server-Side Request Forgery) vulnerability by reading a local file (e.g., /etc/passwd) and exfiltrating its contents to an attacker-controlled server. It uses XMLHttpRequest to perform the file read and data exfiltration.