ProjectSend (formerly cFTP) r582 allows Insecure Direct Object Reference via includes/actions.log.export.php.

Published Oct 28, 2018 · Updated Aug 6, 2024 · Assigned by mitre