CVE-2022-0073CWE-20

Authenticated Remote Code Execution in OpenLiteSpeed Web Server

High · published October 27, 2022

CVSS v3.1
8.8
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.09205 · 95.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-10-27T19:30Z
EPSS history
Timeline
  • 27 OCT 19:30Z
    Authenticated Remote Code Execution in OpenLiteSpeed Web Server
    cvelistv5