Server side request forgery in LiveHelperChat

ALTO 8.1CVE-2022-1213 · BIT-livehelperchat-2022-1213 · GHSA-hhr9-7xvh-8xgc · Published 05/04/2022 · updated 17/06/2026

In breve

CVE-2022-1213 è una vulnerabilità ALTO (CVSS 8.1) che riguarda remdex/livehelperchat, live helper chat (livehelperchat).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.58%, superiore al 47.7% delle vulnerabilità.
Correzione: aggiornare a 3.67, 3.97 o successiva.

Package	Affected versions	Patched versions
remdex/livehelperchat Packagist	`< 3.67`	`3.67`
live helper chat livehelperchat	`< 3.97`	`3.97`

Description

SSRF filter bypass port 80, 433 in LiveHelperChat prior to v3.67. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

NVD description

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

References

nvd.nist.gov/vuln/detail/CVE-2022-1213 · ADVISORY
LiveHelperChat/livehelperchat · WEB
livehelperchat/livehelperchat commit abc9599 · WEB
livehelperchat/livehelperchat · PACKAGE
huntr.dev/bounties/084387f6-5b9c-4017-baa2-5fcf65b051e1 · WEB

Altre vulnerabilità di remdex/livehelperchat

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

remdex/livehelperchat

Packagist

< 3.67

3.67

live helper chat

livehelperchat

< 3.97

3.97

Description

SSRF filter bypass port 80, 433 in LiveHelperChat prior to v3.67. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

NVD description

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

Altre vulnerabilità di remdex/livehelperchat

Vedi tutto →