Skip to content
OpenAdvisories
High · 8.8 CVE-2022-0074 EUVD-2022-15295GHSA-p85c-c374-mg9g

Privilege Escalation in OpenLiteSpeed Web Server

Published Oct 27, 2022 · Updated May 9, 2025 · Assigned by palo_alto

Description

Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1.

Affected products

VendorProductAffectedFixed
LiteSpeed Technologies OpenLiteSpeed Web Server 1.6.15 – < 1.7.16.1 1.7.16.1
LiteSpeed Technologies LiteSpeed Web Server 1.6.15 – < 1.7.16.1 1.7.16.1

References