CVE-2017-8848: Allen Disk Project Allen Disk

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password.

Affected products

• Allen Disk Project Allen Disk: version 1.6 only

Published 2017-05-08. Last modified 2026-06-17.