GHSA-4XWW-6H7V-29JG中危已审查

User enumeration in livehelperchat

OSV 1.4.0 · github-reviewed · 修改于 2022-01-13 03:34

发布时间

2022-01-22 07:37

GitHub 审查时间

2022-01-13 03:34

NVD 发布时间

2022-01-04 15:15

源文件

advisories/github-reviewed/2022/01/GHSA-4xww-6h7v-29jg/GHSA-4xww-6h7v-29jg.json

公告说明

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information. There is an observable discrepancy between errors generated for users that exist and those that do not.

受影响的软件包

Packagist

remdex/livehelperchat

ECOSYSTEM

引入0修复3.91

标识信息

别名 / CVE

CVE-2022-0083

CWE

CWE-209

软件生态

Packagist

扩展资料

暂无扩展资料。

CVSS 评分

没有 CVSS 数据。

原始 OSV JSON

{
  "id": "GHSA-4xww-6h7v-29jg",
  "aliases": [
    "CVE-2022-0083"
  ],
  "details": "livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information. There is an observable discrepancy between errors generated for users that exist and those that do not.",
  "summary": "User enumeration in livehelperchat",
  "affected": [
    {
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.91"
            }
          ]
        }
      ],
      "package": {
        "name": "remdex/livehelperchat",
        "ecosystem": "Packagist"
      }
    }
  ],
  "modified": "2022-01-12T19:34:13Z",
  "severity": [],
  "published": "2022-01-21T23:37:07Z",
  "references": [
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0083",
      "type": "ADVISORY"
    },
    {
      "url": "https://github.com/livehelperchat/livehelperchat/commit/fbed8728be59040a7218610e72f6eceb5f8bc152",
      "type": "WEB"
    },
    {
      "url": "https://github.com/livehelperchat/livehelperchat",
      "type": "PACKAGE"
    },
    {
      "url": "https://huntr.dev/bounties/4c477440-3b03-42eb-a6e2-a31b55090736",
      "type": "WEB"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [
      "CWE-209"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "nvd_published_at": "2022-01-04T07:15:00Z",
    "github_reviewed_at": "2022-01-12T19:34:13Z"
  }
}