EIP-2026-103842

The vulnerability in Allaire JRun allows directory traversal via malformed URLs using the SSIFilter servlet, enabling unauthorized read access to files outside the webroot. The exploit leverages improper path validation to disclose arbitrary file contents or source code.