Skip to content
OpenAdvisories
High · 8.8 CVE-2022-0073 EUVD-2022-15294GHSA-p42f-x6hp-xv84

Authenticated Remote Code Execution in OpenLiteSpeed Web Server

Published Oct 27, 2022 · Updated May 5, 2025 · Assigned by palo_alto

Description

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.

Affected products

VendorProductAffectedFixed
LiteSpeed Technologies OpenLiteSpeed Web Server 1.7.0 – < 1.7.16.1 1.7.16.1
LiteSpeed Technologies LiteSpeed Web Server 1.7.0 – < 1.7.16.1 1.7.16.1

References