CVE-2023-40518

LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers

published August 14, 2023

CVSS
—
EPSS
1%
Percentile
50.6
In the wild
Unconfirmed
What it is

LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00652 · 50.6th percentile
Published
2023-08-14T00:00Z
EPSS history
Timeline
  • 14 AUG 00:00Z
    LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers
    cvelistv5