high7.7
CVE-2022-1213
Server side request forgery in LiveHelperChat
Impact
SSRF filter bypass port 80, 433 in LiveHelperChat prior to v3.67. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | remdex/livehelperchat | < 3.67 | 3.67 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Livehelperchat | Live Helper Chat | before 3.97 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/livehelperchat/livehelperchat/commit/abc9599ee7aded466ca216741dcaea533c908111
- https://huntr.dev/bounties/084387f6-5b9c-4017-baa2-5fcf65b051e1
- https://github.com/advisories/GHSA-hhr9-7xvh-8xgc
- https://nvd.nist.gov/vuln/detail/CVE-2022-1213
- https://github.com/LiveHelperChat/livehelperchat/issues/1752