CVE-2022-0083
Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
7.3
Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
- Record
CVE-2022-0083- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-209
- Updated
- 2026-11-02
EUVDEUVD-2022-0451
7.3
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
- Record
EUVD-2022-0451- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4xww-6h7v-29jg No score
User enumeration in livehelperchat
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information. There is an observable discrepancy between errors generated for users that exist and those that do not.
- Record
GHSA-4xww-6h7v-29jg- Weakness
- CWE-209
- Updated
- 2026-11-02
NVD
5.3
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
- Record
CVE-2022-0083- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-209
- Updated
- 2026-11-02
OSV
7.3
Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
- Record
CVE-2022-0083- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-209
- Updated
- 2026-11-02
OSVBIT-livehelperchat-2022-0083 No score
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
- Record
BIT-livehelperchat-2022-0083- Updated
- 2026-11-02
OSVGHSA-4xww-6h7v-29jg No score
User enumeration in livehelperchat
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information. There is an observable discrepancy between errors generated for users that exist and those that do not.
- Record
GHSA-4xww-6h7v-29jg- Weakness
- CWE-209
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
remdex/livehelperchatPackagist |
before 3.91 | 3.91 |
livehelperchatBitnami |
before 3.91.0 | 3.91.0 |
remdex/livehelperchatPackagist |
before 3.91, plus listed versions 1.741.811.821.831.84 Show 12 moreShow less1.851.861.871.881.891.901.911.931.941.951.982.0 |
3.91 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-0083 is a high vulnerability (CVSS 7.3) in Livehelperchat Livehelperchat/livehelperchat, published January 4, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.93%, the 60th percentile. Fixed in remdex/livehelperchat 3.91.
References
huntr.dev/bounties/4c477440-3b03-42eb-a6e2-a31b55090736
github.com/livehelperchat/livehelperchat/commit/fbed8728be59040a7218610e72f6eceb5f8bc152
nvd.nist.gov/vuln/detail/CVE-2022-0083
github.com/advisories/GHSA-4xww-6h7v-29jg
github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0083.json
github.com/livehelperchat/livehelperchat