Vulnerabilities > Eloan Project

DATE CVE VULNERABILITY TITLE RISK
2019-03-04 CVE-2019-9552 Forced Browsing vulnerability in Eloan Project Eloan 20180920/3.0
Eloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the p2p/api/ or p2p/lib/ or p2p/images/ URI.
network
low complexity
eloan-project CWE-425
critical
9.8