CVE-2022-1176

HIGH7.5EPSS 0.29%

Type Confusion in LiveHelperChat

發布日:2022/4/1修改日:2023/12/6

也稱為:GHSA-5cmw-fhq9-8fhhBIT-livehelperchat-2022-1176

描述

Live Helper Chat provides live support for your website. Loose comparison causes IDOR on multiple endpoints in LiveHelperChat prior to 3.96. There is a fix released in versions 3.96 and 3.97. Currently, there is no known workaround.

受影響套件(2)

Bitnami/livehelperchatfrom 0, < 3.96.0
Packagist/remdex/livehelperchatfrom 0, < 3.96

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH7.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

參考連結(4)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-1176
PATCHhttps://github.com/livehelperchat/livehelperchat
WEBhttps://github.com/livehelperchat/livehelperchat/commit/72c0df160bfe9838c618652facef29af99392ce3
WEBhttps://huntr.dev/bounties/3e30171b-c9bf-415c-82f1-6f55a44d09d3