PT-2022-13717 · Unknown · Livehelperchat

Published 2022-04-05 · Updated 2024-03-06 · CVE-2022-1213

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions LiveHelperChat versions prior to 3.67

Description The issue allows an attacker to bypass the SSRF filter on ports 80 and 433, making the application perform arbitrary requests.

Recommendations For versions prior to 3.67, update to version 3.67 or later to resolve the issue.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BIT-LIVEHELPERCHAT-2022-1213

CVE-2022-1213

GHSA-HHR9-7XVH-8XGC

Affected Products

Livehelperchat

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1213.json · Exploit
• 🔥 https://huntr.dev/bounties/084387f6-5b9c-4017-baa2-5fcf65b051e1 · Exploit
• https://github.com/livehelperchat/livehelperchat/commit/abc9599ee7aded466ca216741dcaea533c908111 · Patch
• https://osv.dev/vulnerability/CVE-2022-1213 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-livehelperchat-2022-1213 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1213 · Security Note
• https://osv.dev/vulnerability/GHSA-hhr9-7xvh-8xgc · Vendor Advisory
• https://github.com/LiveHelperChat/livehelperchat/issues/1752 · Note
• https://github.com/livehelperchat/livehelperchat · Note