CVE-2022-0073

2022-10-2720:15:12

Google

osv.dev

cve-2022-0073

command injection

openlitespeed web server

litespeed web server

input validation

software vulnerability

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.0%

JSON

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.

CPENameOperatorVersion
openlitespeedeq1.7.1
openlitespeedeq1.7.7
openlitespeedeq1.7.18
openlitespeedeq1.7.3
openlitespeedeq1.7.13.2
openlitespeedeq1.7.6
openlitespeedeq1.7.16
openlitespeedeq1.7.8
openlitespeedeq1.7.15.2
openlitespeedeq1.7.14

Name	Operator	Version
openlitespeed	eq	1.7.1
openlitespeed	eq	1.7.7
openlitespeed	eq	1.7.18
openlitespeed	eq	1.7.3
openlitespeed	eq	1.7.13.2
openlitespeed	eq	1.7.6
openlitespeed	eq	1.7.16
openlitespeed	eq	1.7.8
openlitespeed	eq	1.7.15.2
openlitespeed	eq	1.7.14