Server side request forgery in LiveHelperChat

ALTO 8.1CVE-2022-1213 · BIT-livehelperchat-2022-1213 · GHSA-hhr9-7xvh-8xgc · Published 05/04/2022 · updated 17/06/2026

Em resumo

CVE-2022-1213 é uma vulnerabilidade ALTO (CVSS 8.1) que afeta remdex/livehelperchat, live helper chat (livehelperchat).
Chance de exploração nos próximos 30 dias (EPSS): 0.58%, maior que 47.7% das vulnerabilidades.
Correção: atualize para 3.67, 3.97 ou posterior.

Package	Affected versions	Patched versions
remdex/livehelperchat Packagist	`< 3.67`	`3.67`
live helper chat livehelperchat	`< 3.97`	`3.97`

Description

SSRF filter bypass port 80, 433 in LiveHelperChat prior to v3.67. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

NVD description

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

References

nvd.nist.gov/vuln/detail/CVE-2022-1213 · ADVISORY
LiveHelperChat/livehelperchat · WEB
livehelperchat/livehelperchat commit abc9599 · WEB
livehelperchat/livehelperchat · PACKAGE
huntr.dev/bounties/084387f6-5b9c-4017-baa2-5fcf65b051e1 · WEB

Mais vulnerabilidades de remdex/livehelperchat

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

remdex/livehelperchat

Packagist

< 3.67

3.67

live helper chat

livehelperchat

< 3.97

3.97

Description

SSRF filter bypass port 80, 433 in LiveHelperChat prior to v3.67. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

NVD description

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

Mais vulnerabilidades de remdex/livehelperchat

Ver tudo →