GitHub Advisoryadvisory · Packagist

GHSA-5cmw-fhq9-8fhh Type Confusion in LiveHelperChat

HIGH Published 2022-04-01 Modified 2022-04-12 Official page ↗
Aliases
CVE-2022-1176
Ecosystem
Packagist
Packages
remdex/livehelperchat
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-843
Reviewed
2022-04-01

Affected packages

• Packagist remdex/livehelperchat: < 3.96 → fixed in 3.96

Description

Live Helper Chat provides live support for your website. Loose comparison causes IDOR on multiple endpoints in LiveHelperChat prior to 3.96. There is a fix released in versions 3.96 and 3.97. Currently, there is no known workaround.

Related

Alias · CVE (1)

  • CVE-2022-1176 Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96. vulnerability

Weakness · CWE (1)

  • CWE-843 Access of Resource Using Incompatible Type weakness

References