Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-0266 BIT-livehelperchat-2022-0266EUVD-2022-0560GHSA-c7fm-jx59-wjf6

Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat

Published Jan 19, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: LiveHelperChat Product: livehelperchat/livehelperchat Package: remdex/livehelperchat Ecosystem: Packagist

Description

Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v.

Affected products

VendorProductAffectedFixed
livehelperchat livehelperchat/livehelperchat unspecified – < 3.92v 3.92v

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist remdex/livehelperchat < 3.92 3.92 GHSA-c7fm-jx59-wjf6

References