Bitnami package

livehelperchat

pkg:bitnami/livehelperchat

Vulnerabilities (29)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2022-1530	Med	6.1	< 3.99.0	3.99.0	Apr 29, 2022	Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application.
CVE-2022-0935	Hig	8.8	< 3.97.0	3.97.0	Apr 7, 2022	Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97.
CVE-2022-1234	Med	6.1	< 3.97.0	3.97.0	Apr 6, 2022	XSS in livehelperchat in GitHub repository livehelperchat/livehelperchat prior to 3.97. This vulnerability has the potential to deface websites, result in compromised user accounts, and can run malicious code on web pages, which can lead to a compromise of the user’s device.
CVE-2022-1235	Hig	8.2	< 3.96.0	3.96.0	Apr 5, 2022	Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96.
CVE-2022-1213	Hig	8.1	< 3.97.0	3.97.0	Apr 5, 2022	SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191
CVE-2022-1176	Hig	7.5	< 3.96.0	3.96.0	Mar 31, 2022	Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96.
CVE-2022-1191	Hig	8.1	< 3.96.0	3.96.0	Mar 31, 2022	SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96.
CVE-2022-0612	Med	5.4	< 3.92.0	3.92.0	Feb 16, 2022	Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2022-0502	Med	5.4	< 3.92.0	3.92.0	Feb 6, 2022	Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2022-0395	Med	5.4	< 3.93.0	3.93.0	Jan 28, 2022	Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2022-0394	Med	5.4	< 3.93.0	3.93.0	Jan 28, 2022	Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2022-0375	Med	4.8	< 3.93.0	3.93.0	Jan 26, 2022	Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2022-0374	Med	5.4	< 3.93.0	3.93.0	Jan 26, 2022	Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2022-0266	Med	6.6	< 3.92.0	3.92.0	Jan 19, 2022	Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v.
CVE-2022-0226	Med	4.3	< 2.0.0	2.0.0	Jan 14, 2022	livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2022-0231	Med	6.5	< 3.91.0	3.91.0	Jan 14, 2022	livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2022-0083	Med	5.3	< 3.91.0	3.91.0	Jan 4, 2022	livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
CVE-2021-4176	Med	6.1	< 3.91.0	3.91.0	Dec 29, 2021	livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4175	Med	5.4	< 3.91.0	3.91.0	Dec 29, 2021	livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4179	Med	5.4	< 3.91.0	3.91.0	Dec 28, 2021	livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2022-1530MedApr 29, 2022
affected < 3.99.0fixed 3.99.0
Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application.
CVE-2022-0935HigApr 7, 2022
affected < 3.97.0fixed 3.97.0
Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97.
CVE-2022-1234MedApr 6, 2022
affected < 3.97.0fixed 3.97.0
XSS in livehelperchat in GitHub repository livehelperchat/livehelperchat prior to 3.97. This vulnerability has the potential to deface websites, result in compromised user accounts, and can run malicious code on web pages, which can lead to a compromise of the user’s device.
CVE-2022-1235HigApr 5, 2022
affected < 3.96.0fixed 3.96.0
Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96.
CVE-2022-1213HigApr 5, 2022
affected < 3.97.0fixed 3.97.0
SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191
CVE-2022-1176HigMar 31, 2022
affected < 3.96.0fixed 3.96.0
Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96.
CVE-2022-1191HigMar 31, 2022
affected < 3.96.0fixed 3.96.0
SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96.
CVE-2022-0612MedFeb 16, 2022
affected < 3.92.0fixed 3.92.0
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2022-0502MedFeb 6, 2022
affected < 3.92.0fixed 3.92.0
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2022-0395MedJan 28, 2022
affected < 3.93.0fixed 3.93.0
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2022-0394MedJan 28, 2022
affected < 3.93.0fixed 3.93.0
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2022-0375MedJan 26, 2022
affected < 3.93.0fixed 3.93.0
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2022-0374MedJan 26, 2022
affected < 3.93.0fixed 3.93.0
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVE-2022-0266MedJan 19, 2022
affected < 3.92.0fixed 3.92.0
Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v.
CVE-2022-0226MedJan 14, 2022
affected < 2.0.0fixed 2.0.0
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2022-0231MedJan 14, 2022
affected < 3.91.0fixed 3.91.0
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2022-0083MedJan 4, 2022
affected < 3.91.0fixed 3.91.0
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
CVE-2021-4176MedDec 29, 2021
affected < 3.91.0fixed 3.91.0
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4175MedDec 29, 2021
affected < 3.91.0fixed 3.91.0
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4179MedDec 28, 2021
affected < 3.91.0fixed 3.91.0
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Page 1 of 2