critical9.8
CVE-2019-9552
Eloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the p2p/api/ or p2p/lib/ or p2p/images/ URI.
Impact
Eloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the p2p/api/ or p2p/lib/ or p2p/images/ URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eloan Project | Eloan | from 3.0 through 2018-09-20 |