Skip to content
OpenAdvisories
High · 7.7 CVE-2022-1213 BIT-livehelperchat-2022-1213EUVD-2022-1761GHSA-hhr9-7xvh-8xgc

SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat

Published Apr 5, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Description

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

Affected products

VendorProductAffectedFixed
livehelperchat livehelperchat/livehelperchat unspecified – < 3.67v 3.67v

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist remdex/livehelperchat < 3.67 3.67 GHSA-hhr9-7xvh-8xgc

References