Description (CNA)
Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| LiteSpeed Technologies / OpenLiteSpeed Web Server | affected 1.7.0 before 1.7.16.1 |
| LiteSpeed Technologies / LiteSpeed Web Server | affected 1.7.0 before 1.7.16.1 |
CWE
CWE-20
References
- https://github.com/litespeedtech/openlitespeed/blob/v1.7.16/dist/admin/html.open/lib/CValidation.php#L565
- https://github.com/litespeedtech/openlitespeed/blob/v1.7.16.1/dist/admin/html.open/lib/CValidation.php#L565
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.