EIP-2026-104050

This exploit demonstrates a directory traversal vulnerability in Play! Framework <= 1.0.3.1, allowing an attacker to read arbitrary files accessible to the Play! process by manipulating the URL path. The exploit leverages improper sanitization of user-supplied input in the static file serving mechanism.