livehelperchat Server-Side Template Injection

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-27516 · ADVISORY
• LiveHelperChat/livehelperchat · WEB
• LiveHelperChat/livehelperchat commit a61d231 · WEB
• LiveHelperChat/livehelperchat · PACKAGE

remdex/livehelperchat のその他の脆弱性

• CVE-2022-1530中 6.1Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript …
• CVE-2022-1235高 8.2Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96.
• CVE-2022-1213高 8.1SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application pe…
• CVE-2022-1176高 7.5Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96.
• CVE-2022-0612中 5.4Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.