EIP-2026-113325

This is a vulnerability writeup describing an arbitrary file disclosure vulnerability in Filemanager due to insufficient sanitization of URI parameters. The attacker can exploit this by specifying absolute paths in the 'fichier' parameter to disclose sensitive files like /etc/passwd.