Description (CNA)
Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| LiteSpeed Technologies / OpenLiteSpeed Web Server | affected 1.5.11 through 1.5.12; affected 1.6.5 through 1.6.20.1; affected 1.7.0 before 1.7.16.1 |
| LiteSpeed Technologies / LiteSpeed Web Server | affected 1.5.11 through 1.5.12; affected 1.6.5 through 1.6.20.1; affected 1.7.0 before 1.7.16.1 |
CWE
CWE-22
References
- https://github.com/litespeedtech/openlitespeed/blob/v1.7.16/src/main/httpserver.cpp#L2060-L2061
- https://github.com/litespeedtech/openlitespeed/blob/v1.7.16.1/src/main/httpserver.cpp#L2060-L2061
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.