GitHub Advisoryadvisory · Packagist

GHSA-4xww-6h7v-29jg User enumeration in livehelperchat

MEDIUM Published 2022-01-21 Modified 2022-01-12 Official page ↗
Aliases
CVE-2022-0083
Ecosystem
Packagist
Packages
remdex/livehelperchat
Severity
Moderate
Weaknesses
CWE-209
Reviewed
2022-01-12

Affected packages

• Packagist remdex/livehelperchat: < 3.91 → fixed in 3.91

Description

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information. There is an observable discrepancy between errors generated for users that exist and those that do not.

Related

Alias · CVE (1)

  • CVE-2022-0083 livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information vulnerability

Weakness · CWE (1)

  • CWE-209 Generation of Error Message Containing Sensitive Information weakness

References