GitHub Advisoryadvisory · Packagist

GHSA-hhr9-7xvh-8xgc Server side request forgery in LiveHelperChat

HIGH Published 2022-04-06 Modified 2022-04-19 Official page ↗
Aliases
CVE-2022-1213
Ecosystem
Packagist
Packages
remdex/livehelperchat
Severity
High
CVSS vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
Weaknesses
CWE-918
Reviewed
2022-04-07

Affected packages

• Packagist remdex/livehelperchat: < 3.67 → fixed in 3.67

Description

SSRF filter bypass port 80, 433 in LiveHelperChat prior to v3.67. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

Related

Alias · CVE (1)

  • CVE-2022-1213 SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References