medium5.3
CVE-2022-0083
User enumeration in livehelperchat
Impact
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information. There is an observable discrepancy between errors generated for users that exist and those that do not.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | remdex/livehelperchat | < 3.91 | 3.91 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Livehelperchat | Live Helper Chat | before 3.91 |