Type Confusion in LiveHelperChat

2022-04-0100:00:40

Google

osv.dev

0.001 Low

EPSS

Percentile

51.1%

JSON

Live Helper Chat provides live support for your website. Loose comparison causes IDOR on multiple endpoints in LiveHelperChat prior to 3.96. There is a fix released in versions 3.96 and 3.97. Currently, there is no known workaround.

CPENameOperatorVersion
remdex/livehelperchateq1.95
remdex/livehelperchateq1.89
remdex/livehelperchateq1.74
remdex/livehelperchateq1.86
remdex/livehelperchateq1.94
remdex/livehelperchateq1.83
remdex/livehelperchateq1.91
remdex/livehelperchateq1.93
remdex/livehelperchateq1.85
remdex/livehelperchateq1.98

Name	Operator	Version
remdex/livehelperchat	eq	1.95
remdex/livehelperchat	eq	1.89
remdex/livehelperchat	eq	1.74
remdex/livehelperchat	eq	1.86
remdex/livehelperchat	eq	1.94
remdex/livehelperchat	eq	1.83
remdex/livehelperchat	eq	1.91
remdex/livehelperchat	eq	1.93
remdex/livehelperchat	eq	1.85
remdex/livehelperchat	eq	1.98