CVE-2017-8848

Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password...

CVE-2017-8848

Summary (CVE-2017-8848): Allen Disk 1.6 contains a cross-site request forgery (CSRF) in setpass.php that can change a password. Multiple sources (CNVD-2017-07083, NVD entry, Red Hat listing) confirm the vulnerability in Allen Disk 1.6 and its CSRF nature, but the connected documents do not provid...