livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-4123 · ADVISORY
• livehelperchat/livehelperchat commit 2a98c69 · WEB
• livehelperchat/livehelperchat · PACKAGE
• huntr.dev/bounties/52182545-fdd6-4d4f-9fba-25010f7f8cba · WEB

Lỗ hổng khác của remdex/livehelperchat

• CVE-2024-27516NGHIÊM TRỌNG 9.8Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and ob…
• CVE-2022-1530TRUNG BÌNH 6.1Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript …
• CVE-2022-1235CAO 8.2Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96.
• CVE-2022-1213CAO 8.1SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application pe…
• CVE-2022-1176CAO 7.5Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96.