GHSA-4xww-6h7v-29jg

ghsaUSosv

User enumeration in livehelperchat

view advisory published 2022-01-21Licence: CC-BY-4.0

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information. There is an observable discrepancy between errors generated for users that exist and those that do not.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-0083US	medium5.3	0.90% (59th)	—	2022-01-04
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information

references

External citations — patches, advisories, analysis.

https://github.com/livehelperchat/livehelperchatPACKAGE
https://github.com/livehelperchat/livehelperchat/commit/fbed8728be59040a7218610e72f6eceb5f8bc152WEB
https://huntr.dev/bounties/4c477440-3b03-42eb-a6e2-a31b55090736WEB
https://nvd.nist.gov/vuln/detail/CVE-2022-0083ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan