TI-2017-14355 CVE-2017-1000008 · GHSA-f2jh-c997-v9jrChyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing…Priority LOW 39Chyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing attackers to hijack the authentication of logged in users to modify account information, including their password.CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00658 · Published 2017-07-13 · No fix listed CWE-352