Lucene search
+L

457 matches found

Github Security Blog
Github Security Blog
•added 2022/01/21 11:25 p.m.•39 views

Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

Cross-Site Request Forgery CSRF in GitHub repository livehelperchat/livehelperchat...

5.7CVSS3.2AI score0.00439EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2022/01/21 11:25 p.m.•37 views

GHSA-VXH4-X6GV-MPHF Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

Cross-Site Request Forgery CSRF in GitHub repository livehelperchat/livehelperchat...

4.3CVSS4.6AI score0.00439EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2022/01/21 6:50 p.m.•38 views

Authorization Bypass Through User-Controlled Key in LiveHelperChat

Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v...

6.6CVSS2.3AI score0.01086EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2022/01/21 6:50 p.m.•29 views

GHSA-C7FM-JX59-WJF6 Authorization Bypass Through User-Controlled Key in LiveHelperChat

Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v...

6.5CVSS6.3AI score0.01086EPSS
SaveExploits1References4
CNVD
CNVD
•added 2022/01/21 12:00 a.m.•66 views

livehelperchat cross-site request forgery vulnerability (CNVD-2022-08284)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability previously existed in livehelperchat 2.0, which stemmed from a WEB application that did not adequately validate that a request was comin...

5.7CVSS4.3AI score0.00439EPSS
SaveExploits1References1
Veracode
Veracode
•added 2022/01/19 6:49 a.m.•24 views

Cross-Site Request Forgery (CSRF)

remdex/livehelperchat is vulnerable to cross-site request forgery. The library does not properly validate the CSRF tokens in CannedMessage requests, allowing an attacker to create arbitrary canned messages, modify notification settings and group chat options...

4.3CVSS4AI score0.00439EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2022/01/19 6:15 a.m.•42 views

CVE-2022-0266

Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v...

6.6CVSS0.01086EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/19 6:15 a.m.•19 views

Authorization

Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v...

6CVSS6.4AI score0.01086EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2022/01/19 5:20 a.m.•103 views

CVE-2022-0266

CVE-2022-0266 affects livehelperchat (Packagist remdex/livehelperchat) prior to version 3.92. The vulnerability is described as an authorization bypass via a user-controlled key. Multiple connected sources (OSV, CNVD/CNNVD, NVD, CVE lists) consistently reference the same issue and suggest upgradi...

6.6CVSS6.7AI score0.01086EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/01/19 5:20 a.m.•53 views

CVE-2022-0266 Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat

Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v...

6.5CVSS6.6AI score0.01086EPSS
SaveExploits1References2
OSV
OSV
•added 2022/01/19 5:20 a.m.•20 views

CVE-2022-0266 Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat

Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v...

6.5CVSS6.4AI score
SaveExploits0References4
CNVD
CNVD
•added 2022/01/19 12:00 a.m.•57 views

livehelperchat Cross-Site Scripting Vulnerability (CNVD-2022-08229)

livehelperchat is available via Live Helper Chat, which provides free live support on the website. livehelperchat suffers from a cross-site scripting vulnerability that stems from livehelperchat being vulnerable to incorrect neutralization during page generation. No detailed vulnerability details...

7.1CVSS2AI score0.00813EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/19 12:00 a.m.•3 views

CVE-2022-0266: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v...

6.6CVSS5.7AI score0.01086EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/01/19 12:00 a.m.•17 views

livehelperchat 安全漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A security vulnerability exists in versions prior to livehelperchat 3.92v that stems from a user control key authorization bypass. No details of the vulnerability are provided at...

6.6CVSS5.6AI score0.01086EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/01/19 12:00 a.m.•13 views

PT-2022-13081 · Remdex · Livehelperchat

Name of the Vulnerable Software and Affected Versions: remdex/livehelperchat versions prior to 3.92v Description: The issue is related to an authorization bypass through a user-controlled key. This allows unauthorized access, potentially leading to security breaches. The estimated number of...

6.6CVSS6.3AI score0.01086EPSS
SaveExploits1References8
attackerkb
attackerkb
•added 2022/01/18 6:15 a.m.•12 views

CVE-2022-0245

Cross-Site Request Forgery CSRF in GitHub repository livehelperchat/livehelperchat prior to 2.0...

5.7CVSS5.8AI score0.00439EPSS
SaveExploits1References3
NVD
NVD
•added 2022/01/18 6:15 a.m.•36 views

CVE-2022-0245

Cross-Site Request Forgery CSRF in GitHub repository livehelperchat/livehelperchat prior to 2.0...

5.7CVSS0.00439EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/18 6:15 a.m.•17 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in GitHub repository livehelperchat/livehelperchat prior to 2.0...

4.3CVSS4.6AI score0.00439EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/01/18 5:15 a.m.•50 views

CVE-2022-0245 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

Cross-Site Request Forgery CSRF in GitHub repository livehelperchat/livehelperchat prior to 2.0...

5.7CVSS5AI score0.00439EPSS
SaveExploits1References2
CVE
CVE
•added 2022/01/18 5:15 a.m.•101 views

CVE-2022-0245

CVE-2022-0245 is a CSRF vulnerability in livehelperchat/livehelperchat prior to version 2.0. The issue arises from insufficient validation of request origin, allowing an attacker to induce unintended actions on behalf of authenticated users via the affected client. Documents consistently describe...

5.7CVSS5.8AI score0.00439EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder