livehelperchat/livehelperchat · Security
Type Confusion in LiveHelperChat
- GHSA ID
- GHSA-5cmw-fhq9-8fhh
- CVE ID
- CVE-2022-1176
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v3
- 7.5 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Live Helper Chat provides live support for your website. Loose comparison causes IDOR on multiple endpoints in LiveHelperChat prior to 3.96. There is a fix released in versions 3.96 and 3.97. Currently, there is no known workaround.
CWEs
- CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')