User enumeration in livehelperchat

MEDIUM 5.3CVE-2022-0083 · BIT-livehelperchat-2022-0083 · GHSA-4xww-6h7v-29jg · Published 04/01/2022 · updated 17/06/2026

In short

CVE-2022-0083 is a MEDIUM (CVSS 5.3) vulnerability affecting remdex/livehelperchat, live helper chat (livehelperchat).
Chance of exploitation in the next 30 days (EPSS): 0.93%, higher than 60.6% of all vulnerabilities.
Fix: update to 3.91 or later.

Package	Affected versions	Patched versions
remdex/livehelperchat Packagist	`< 3.91`	`3.91`
live helper chat livehelperchat	`< 3.91`	`3.91`

Description

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information. There is an observable discrepancy between errors generated for users that exist and those that do not.

NVD description

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information

References

nvd.nist.gov/vuln/detail/CVE-2022-0083 · ADVISORY
livehelperchat/livehelperchat commit fbed872 · WEB
livehelperchat/livehelperchat · PACKAGE
huntr.dev/bounties/4c477440-3b03-42eb-a6e2-a31b55090736 · WEB

More vulnerabilities in remdex/livehelperchat

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

remdex/livehelperchat

Packagist

< 3.91

3.91

live helper chat

livehelperchat

< 3.91

3.91

Description

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information. There is an observable discrepancy between errors generated for users that exist and those that do not.

NVD description

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information

More vulnerabilities in remdex/livehelperchat

See all →