EIP-2026-112832

This is a technical writeup describing a path traversal vulnerability in TYPO3 11.5.24, where an authenticated attacker can read arbitrary files by manipulating the basePath parameter in a POST request. The steps to exploit the vulnerability are clearly outlined, including the specific HTTP request format.