CVE-2022-0072: Directory Traversal in OpenLiteSpeed Web Server
First published: Thu Oct 27 2022(Updated: )
Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1
Credit: psirt@paloaltonetworks.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Litespeedtech Openlitespeed | >=1.6.5<=1.6.20.1 | |
| Litespeedtech Openlitespeed | >=1.7.0<1.7.16.1 | |
| Litespeedtech Openlitespeed | =1.5.11 | |
| Litespeedtech Openlitespeed | =1.5.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/type
- agent/references
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/title
- agent/last-modified-date
- agent/weakness
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/litespeedtech
- canonical/litespeedtech openlitespeed
- version/litespeedtech openlitespeed/1.6.5
- version/litespeedtech openlitespeed/1.6.20.1
- version/litespeedtech openlitespeed/1.7.0
- version/litespeedtech openlitespeed/1.5.11
- version/litespeedtech openlitespeed/1.5.12