CVE-2022-1191

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 31-03-2022 11:15

Last modified: - 08-04-2022 03:50

Total changes: - 2

Description

SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

High

Confidentiality

High

Integrity

Low

Privileges required

Unchanged

Scope

None

User interaction

8.1

Base score

2.8

5.2

Exploitability score

Impact score

Verification logic

vendor=livehelperchat AND product=live_helper_chat AND versionEndExcluding=3.96

Reference

https://huntr.dev/bounties/7264a2e1-17e7-4244-93e4-49ec14f282b3
https://github.com/livehelperchat/livehelperchat/commit/c41f283a2c1b46c42dd2af16ecbeaedd2fe1f5df

Keywords

CVE-2022-1191

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2022-1191

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures