2018-10-28 03:00:00
mitre
PUBLISHED
ProjectSend (formerly cFTP) r582 allows Insecure Direct Object Reference via includes/actions.log.export.php.