CVE-2022-1213

Published: Apr 5, 2022Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

Affected (1)

Products: Livehelperchat: Live Helper Chat

Livehelperchat

1 product

Live Helper Chat

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Livehelperchat Live Helper Chat	Before 3.97

Related CWEs

CWE-918

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (4)

https://github.com/livehelperchat/livehelperchat/commit/abc9599ee7aded466ca216741dcaea533c908111

Source: security@huntr.dev

PatchThird Party Advisory

https://huntr.dev/bounties/084387f6-5b9c-4017-baa2-5fcf65b051e1

Source: security@huntr.dev

ExploitIssue TrackingPatchThird Party Advisory

https://github.com/livehelperchat/livehelperchat/commit/abc9599ee7aded466ca216741dcaea533c908111

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://huntr.dev/bounties/084387f6-5b9c-4017-baa2-5fcf65b051e1

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingPatchThird Party Advisory

Timeline

No history available yet.