CVE-2017-9307: Allen Disk Project Allen Disk

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to conduct port scans and access intranet servers via a crafted file parameter.

Affected products

• Allen Disk Project Allen Disk: version 1.6 only

Published 2017-05-31. Last modified 2026-06-17.