Security Advisory
CVE-2017-1000008
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Chyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing attackers to hijack the authentication of logged in users to modify account information, including their password.