Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: LiteSpeed Web Server, OpenLiteSpeed Web Server 1.7.16.1 Clear all filters
TI-2022-00031 CVE-2022-0074 · GHSA-p85c-c374-mg9g

Privilege Escalation in OpenLiteSpeed Web Server

Priority MEDIUM 41

Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01433 Published 2022-10-27 Fixed in 1.7.16.1 CWE-426
TI-2022-00030 CVE-2022-0073 · GHSA-p42f-x6hp-xv84

Authenticated Remote Code Execution in OpenLiteSpeed Web Server

Priority HIGH 73

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.09736 Published 2022-10-27 Fixed in 1.7.16.1 CWE-20
TI-2022-00029 CVE-2022-0072 · GHSA-f532-g5cf-vhjp

Directory Traversal in OpenLiteSpeed Web Server

Priority LOW 28

Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.01143 Published 2022-10-27 Fixed in 1.7.16.1 CWE-22