Eloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the p2p/api/ or p2p/lib/ or p2p/images/ URI.Referenceshttps://github.com/lmy1342554547/p2pProject/issues/1