GitHub Advisoryadvisory · Packagist

GHSA-h86j-6h6m-qjqw Cross-Site Request Forgery in remdex/livehelperchat

LOW Published 2021-12-10 Modified 2021-12-09 Official page ↗
Aliases
CVE-2021-4049
Ecosystem
Packagist
Packages
remdex/livehelperchat
Severity
Low
Weaknesses
CWE-352
Reviewed
2021-12-08

Affected packages

• Packagist remdex/livehelperchat: <= 2.0 (no fix yet)

Description

An attacker is able to log out a user if a logged-in user visits the attacker's website. While this cannot harm a user's account, it can be a great annoyance and is a valid CSRF.

Related

Alias · CVE (1)

  • CVE-2021-4049 livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) vulnerability

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References