LiteSpeed Web Server vulnerabilities

2 known vulnerabilities in LiteSpeed Web Server from LiteSpeed Technologies. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  OpenLiteSpeed Web Server: Untrusted Search Path

  CVE-2022-0074Oct 27, 2022LiteSpeed TechnologiesEPSS 1.47%

  Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1.

• 8.8 High severity

  Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and…

  CVE-2022-0073Oct 27, 2022LiteSpeed TechnologiesEPSS 9.96%

  Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.