Allen Disk Cross-Site Request Forgery Vulnerability

Allen Disk is a free, open source cloud-based hard disk product that features encrypted file storage, online preview, file sharing and more. A cross-site request forgery vulnerability exists in the setpass.php file in Allen Disk version 1.6. A remote attacker can exploit this vulnerability to...