CVE-2022-0073

🗓️ 27 Oct 2022 19:30:54Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 260 Views

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-0073	27 Oct 202200:00	–	attackerkb
Circl	CVE-2022-0073	28 Oct 202200:29	–	circl
CNNVD	LiteSpeed Technologies OpenLiteSpeed 输入验证错误漏洞	27 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-0073 Authenticated Remote Code Execution in OpenLiteSpeed Web Server	27 Oct 202219:30	–	cvelist
EUVD	EUVD-2022-15294	3 Oct 202520:07	–	euvd
NVD	CVE-2022-0073	27 Oct 202220:15	–	nvd
Prion	Input validation	27 Oct 202220:15	–	prion
Positive Technologies	PT-2022-12964 · Litespeed Technologies · Openlitespeed Web Server +1	27 Oct 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-0073	5 Feb 202519:18	–	redhatcve
The Hacker News	Multiple High-Severity Flaws Affect Widely Used OpenLiteSpeed Web Server Software	11 Nov 202210:13	–	thn

NVD

Vulners

Node

litespeedtech openlitespeedRange1.7.0–1.7.16.1

[
  {
    "defaultStatus": "unaffected",
    "product": "OpenLiteSpeed Web Server",
    "repo": "https://github.com/litespeedtech/openlitespeed",
    "vendor": "LiteSpeed Technologies",
    "versions": [
      {
        "lessThan": "1.7.16.1",
        "status": "affected",
        "version": "1.7.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "LiteSpeed Web Server",
    "vendor": "LiteSpeed Technologies",
    "versions": [
      {
        "lessThan": "1.7.16.1",
        "status": "affected",
        "version": "1.7.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/litespeedtech/openlitespeed/blob/v1.7.16/dist/admin/html.open/lib/CValidation.php
github	www.github.com/litespeedtech/openlitespeed/blob/v1.7.16.1/dist/admin/html.open/lib/CValidation.php