CVE-2017-1000008

Summary: CVE-2017-1000008 affects Chyrp Lite 2016.04. A CSRF flaw in the user settings function lets an attacker hijack the logged-in user’s session to modify account information, including passwords. The CVSS metrics in the primary entry indicate a high impact (C/H, I/H, A/H) with network access...