Litespeedtech

Openlitespeed

11 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2025-54939

Exploit
  • EPSS 0.08%
  • Published 01.08.2025 00:00:00
  • Last modified 27.08.2025 15:52:46

LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.

5.3

CVE-2024-31617

  • EPSS 0.14%
  • Published 22.05.2024 18:15:10
  • Last modified 05.06.2025 15:20:09

OpenLiteSpeed before 1.8.1 mishandles chunked encoding.

7.5

CVE-2023-40518

  • EPSS 0.16%
  • Published 14.08.2023 22:15:14
  • Last modified 21.11.2024 08:19:38

LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers.

5.8

CVE-2022-0072

Exploit
  • EPSS 0.29%
  • Published 27.10.2022 20:15:12
  • Last modified 21.11.2024 06:37:51

Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1

8.8

CVE-2022-0073

Exploit
  • EPSS 0.82%
  • Published 27.10.2022 20:15:12
  • Last modified 21.11.2024 06:37:52

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.

8.8

CVE-2022-0074

Exploit
  • EPSS 0.1%
  • Published 27.10.2022 20:15:12
  • Last modified 21.11.2024 06:37:52

Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1.

9

CVE-2021-26758

Exploit
  • EPSS 3.36%
  • Published 07.04.2021 21:15:16
  • Last modified 21.11.2024 05:56:48

Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root terminal access and execute commands on the host system.

9.8

CVE-2020-5519

  • EPSS 0.52%
  • Published 06.01.2020 13:15:10
  • Last modified 21.11.2024 05:34:12

The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration > External App" screen.

6.5

CVE-2018-19791

Exploit
  • EPSS 0.29%
  • Published 03.12.2018 06:29:00
  • Last modified 21.11.2024 03:58:33

The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests for byte sequences, allowing an attacker to amplify the response size by requesting the entire response body repeatedly, as demonstrated by an HTTP Range header...

6.7

CVE-2018-19792

Exploit
  • EPSS 0.06%
  • Published 03.12.2018 06:29:00
  • Last modified 21.11.2024 03:58:34

The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a denial of service (buffer overflow) or possibly have unspecified other impact by creating a symlink through which the openlitespeed program can be invoked with a lon...