Cross site request forgery (csrf)

2017-07-1713:18:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.9%

JSON

Chyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing attackers to hijack the authentication of logged in users to modify account information, including their password.

CPENameOperatorVersion
chyrp_liteeq2016.04

CPE	Name	Operator	Version
	chyrp_lite	eq	2016.04

References

github.com/xenocrat/chyrp-lite/commit/79bb2de7f57d163d256b6bdb127dc09cfdb6235a