Lucene search

GoogleOSV:CVE-2022-0072

HistoryOct 27, 2022 - 8:15 p.m.

CVE-2022-0072

2022-10-2720:15:12

Google

osv.dev

cve-2022-0072

litespeed technologies

openlitespeed

path traversal

versions 1.5.11 to 1.5.12

versions 1.6.5 to 1.6.20.1

versions 1.7.0 to 1.7.16.1

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

31.0%

JSON

Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1

References

github.com/litespeedtech/openlitespeed/blob/v1.7.16.1/src/main/httpserver.cpp#L2060-L2061

github.com/litespeedtech/openlitespeed/blob/v1.7.16/src/main/httpserver.cpp#L2060-L2061