EIP-2026-104925

This advisory details a Local File Inclusion (LFI) vulnerability in ActiveCollab 2.3.0, caused by insufficient sanitization of the 'module' parameter. The PoC demonstrates directory traversal to access sensitive files like /etc/passwd.