CVE-2022-1235

Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96...

CVE-2022-1235 Weak secrethash can be brute-forced in livehelperchat/livehelperchat

Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96...

CVE-2022-1235

The CVE-2022-1235 issue affects livehelperchat/livehelperchat prior to version 3.96, where a weak secrethash can be brute-forced. The secrethash consists of 10 hex characters, yielding 16^10 possibilities, enabling offline guessing of the secret (SHA1) and compromising security measures tied to t...