Server side request forgery in LiveHelperChat

높음 8.1CVE-2022-1213 · BIT-livehelperchat-2022-1213 · GHSA-hhr9-7xvh-8xgc · Published 05/04/2022 · updated 17/06/2026

요약

CVE-2022-1213은(는) remdex/livehelperchat, live helper chat (livehelperchat)에 영향을 주는 높음 (CVSS 8.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.58%, 전체 취약점의 47.7%보다 높음.
조치: 3.67, 3.97 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
remdex/livehelperchat Packagist	`< 3.67`	`3.67`
live helper chat livehelperchat	`< 3.97`	`3.97`

Description

SSRF filter bypass port 80, 433 in LiveHelperChat prior to v3.67. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

NVD description

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

References

nvd.nist.gov/vuln/detail/CVE-2022-1213 · ADVISORY
LiveHelperChat/livehelperchat · WEB
livehelperchat/livehelperchat commit abc9599 · WEB
livehelperchat/livehelperchat · PACKAGE
huntr.dev/bounties/084387f6-5b9c-4017-baa2-5fcf65b051e1 · WEB

remdex/livehelperchat의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

remdex/livehelperchat

Packagist

< 3.67

3.67

live helper chat

livehelperchat

< 3.97

3.97

Description

SSRF filter bypass port 80, 433 in LiveHelperChat prior to v3.67. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

NVD description

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

remdex/livehelperchat의 다른 취약점

모두 보기 →