Medium severity6.5NVD Advisory· Published May 31, 2017· Updated May 13, 2026
CVE-2017-9307
CVE-2017-9307
Description
SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to conduct port scans and access intranet servers via a crafted file parameter.
Affected products
1- cpe:2.3:a:allen_disk_project:allen_disk:1.6:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/s3131212/allendisk/issues/20nvdThird Party Advisory
News mentions
0No linked articles in our index yet.