Description Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password. References https://github.com/s3131212/allendisk/issues/16