Input validation

2022-10-2720:15:00

PRIOn knowledge base

www.prio-n.com

input validation

litespeed technologies

command injection

nvd

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.0%

JSON

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.

CPENameOperatorVersion
openlitespeedge1.7.0
openlitespeedle1.7.16.1

CPE	Name	Operator	Version
	openlitespeed	ge	1.7.0
	openlitespeed	le	1.7.16.1

References

github.com/litespeedtech/openlitespeed/blob/v1.7.16.1/dist/admin/html.open/lib/CValidation.php

github.com/litespeedtech/openlitespeed/blob/v1.7.16/dist/admin/html.open/lib/CValidation.php