CVE-2017-1000008

    Dashboard / Vulnerabilities / CVE-2017-1000008

    CVE-2017-1000008

    Published: 17 Jul 2017Last Modified: 8 Jul 2026

    Summary:

    Details: Chyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing attackers to hijack the authentication of logged in users to modify account information, including their password.

    References: https://github.com/xenocrat/chyrp-lite/commit/79bb2de7f57d163d256b6bdb127dc09cfdb6235a

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 5fdec05c891d06f5300a8e33ab7cbb18ef7a92a9
    Fixed -None

    Affected versions

    2016.04

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High