CVE-2022-1213: Server-Side Request Forgery (SSRF)

April 6, 2022 (updated April 12, 2022)

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

References

github.com/LiveHelperChat/livehelperchat/issues/1752
github.com/advisories/GHSA-hhr9-7xvh-8xgc
github.com/livehelperchat/livehelperchat/commit/abc9599ee7aded466ca216741dcaea533c908111
huntr.dev/bounties/084387f6-5b9c-4017-baa2-5fcf65b051e1
nvd.nist.gov/vuln/detail/CVE-2022-1213

Code Behaviors & Features

Detect and mitigate CVE-2022-1213 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →