CVE-2017-1000008

Chyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing attackers to hijack the authentication of logged in users to modify…

published July 13, 2017

CVSS
—
EPSS
1%
Percentile
50.9
In the wild
Unconfirmed
What it is

Chyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing attackers to hijack the authentication of logged in users to modify account information, including their password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00658 · 50.9th percentile
Published
2017-07-13T20:00Z
EPSS history
Timeline
  • 13 JUL 20:00Z
    Chyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing attackers to hijack the authentication of logged in users to modify…
    cvelistv5