cve/2022/CVE-2022-1213.md

19 lines
809 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2022-1213](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1213)
![](https://img.shields.io/static/v1?label=Product&message=livehelperchat%2Flivehelperchat&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%203.67v%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-918%20Server-Side%20Request%20Forgery%20(SSRF)&color=brighgreen)
### Description
SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191
### POC
#### Reference
- https://huntr.dev/bounties/084387f6-5b9c-4017-baa2-5fcf65b051e1
#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/nhienit2010/Vulnerability