Skip to content
OpenAdvisories
High · 7.5 CVE-2022-1235 BIT-livehelperchat-2022-1235EUVD-2022-1846GHSA-vx8v-g3p3-88vg

Weak secrethash can be brute-forced in livehelperchat/livehelperchat

Published Apr 5, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: LiveHelperChat Product: livehelperchat/livehelperchat Package: remdex/livehelperchat Ecosystem: Packagist

Description

Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96.

Affected products

VendorProductAffectedFixed
livehelperchat livehelperchat/livehelperchat unspecified – < 3.96 3.96

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist remdex/livehelperchat < 3.96 3.96 GHSA-vx8v-g3p3-88vg

References