CVE-2022-1176

HIGH7.5EPSS 0.29%

Type Confusion in LiveHelperChat

Published: 4/1/2022Modified: 12/6/2023

Also known as:GHSA-5cmw-fhq9-8fhhBIT-livehelperchat-2022-1176

Description

Live Helper Chat provides live support for your website. Loose comparison causes IDOR on multiple endpoints in LiveHelperChat prior to 3.96. There is a fix released in versions 3.96 and 3.97. Currently, there is no known workaround.

Affected packages (2)

Bitnami/livehelperchatfrom 0, < 3.96.0
Packagist/remdex/livehelperchatfrom 0, < 3.96

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References (4)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-1176
PATCHhttps://github.com/livehelperchat/livehelperchat
WEBhttps://github.com/livehelperchat/livehelperchat/commit/72c0df160bfe9838c618652facef29af99392ce3
WEBhttps://huntr.dev/bounties/3e30171b-c9bf-415c-82f1-6f55a44d09d3