EIP-2026-119448

The document describes an arbitrary file download vulnerability in TVersity <= 1.9.7, where crafted URLs can be used to retrieve local files from the server. The exploit leverages path traversal and URL encoding to bypass restrictions.