Skip to content
OpenAdvisories
Medium · 5.8 CVE-2022-0072 EUVD-2022-15293GHSA-f532-g5cf-vhjp

Directory Traversal in OpenLiteSpeed Web Server

Published Oct 27, 2022 · Updated May 9, 2025 · Assigned by palo_alto

Description

Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1

Affected products

VendorProductAffectedFixed
LiteSpeed Technologies OpenLiteSpeed Web Server 1.5.11 – ≤ 1.5.12, 1.6.5 – ≤ 1.6.20.1, 1.7.0 – < 1.7.16.1 1.7.16.1
LiteSpeed Technologies LiteSpeed Web Server 1.5.11 – ≤ 1.5.12, 1.6.5 – ≤ 1.6.20.1, 1.7.0 – < 1.7.16.1 1.7.16.1

References