Lucene search
HistoryOct 27, 2022 - 8:15 p.m.
CVE-2022-0072
litespeed technologies
openlitespeed web server
path traversal
directory traversal
vulnerability
versions.
5.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
31.2%
Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1
Affected configurations
Node
litespeedtechopenlitespeedRange1.6.5–1.6.20.1
ORlitespeedtechopenlitespeedRange1.7.0–1.7.16.1
ORlitespeedtechopenlitespeedMatch1.5.11
ORlitespeedtechopenlitespeedMatch1.5.12
Related
cve
cve
CVE-2022-0072
2022-10-27 20:15:12
cvelist
cvelist
CVE-2022-0072 Directory Traversal in OpenLiteSpeed Web Server
2022-10-27 19:28:49
osv
osv
CVE-2022-0072
2022-10-27 20:15:12
prion
prion
Directory traversal
2022-10-27 20:15:00
thn
thn
5.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
31.2%
Related for NVD:CVE-2022-0072