Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1
References
| Link | Resource |
|---|---|
| https://github.com/litespeedtech/openlitespeed/blob/v1.7.16.1/src/main/httpserver.cpp#L2060-L2061 | Exploit Third Party Advisory |
| https://github.com/litespeedtech/openlitespeed/blob/v1.7.16/src/main/httpserver.cpp#L2060-L2061 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
04 Nov 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1 |
28 Oct 2022, 19:01
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.8 |
| CPE | cpe:2.3:a:litespeedtech:openlitespeed:*:*:*:*:*:*:*:* cpe:2.3:a:litespeedtech:openlitespeed:1.5.12:*:*:*:*:*:*:* cpe:2.3:a:litespeedtech:openlitespeed:1.5.11:*:*:*:*:*:*:* |
|
| CWE | CWE-22 | |
| References | (MISC) https://github.com/litespeedtech/openlitespeed/blob/v1.7.16.1/src/main/httpserver.cpp#L2060-L2061 - Exploit, Third Party Advisory | |
| References | (MISC) https://github.com/litespeedtech/openlitespeed/blob/v1.7.16/src/main/httpserver.cpp#L2060-L2061 - Exploit, Third Party Advisory |
27 Oct 2022, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-10-27 20:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-0072
Mitre link : CVE-2022-0072
CVE.ORG link : CVE-2022-0072
JSON object : View
Products Affected
litespeedtech
- openlitespeed
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')