Server side request forgery in LiveHelperChat

HOCH 8.1CVE-2022-1213 · BIT-livehelperchat-2022-1213 · GHSA-hhr9-7xvh-8xgc · Published 05/04/2022 · updated 17/06/2026

Kurz gesagt

CVE-2022-1213 ist eine Schwachstelle (HOCH (CVSS 8.1)) in remdex/livehelperchat, live helper chat (livehelperchat).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.58%, höher als bei 47.7% aller Schwachstellen.
Abhilfe: auf 3.67, 3.97 oder neuer aktualisieren.

Package	Affected versions	Patched versions
remdex/livehelperchat Packagist	`< 3.67`	`3.67`
live helper chat livehelperchat	`< 3.97`	`3.97`

Description

SSRF filter bypass port 80, 433 in LiveHelperChat prior to v3.67. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

NVD description

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

References

nvd.nist.gov/vuln/detail/CVE-2022-1213 · ADVISORY
LiveHelperChat/livehelperchat · WEB
livehelperchat/livehelperchat commit abc9599 · WEB
livehelperchat/livehelperchat · PACKAGE
huntr.dev/bounties/084387f6-5b9c-4017-baa2-5fcf65b051e1 · WEB

Weitere Schwachstellen in remdex/livehelperchat

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

remdex/livehelperchat

Packagist

< 3.67

3.67

live helper chat

livehelperchat

< 3.97

3.97

Description

SSRF filter bypass port 80, 433 in LiveHelperChat prior to v3.67. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

NVD description

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

Weitere Schwachstellen in remdex/livehelperchat

Alle anzeigen →