Authenticated Remote Code Execution in OpenLiteSpeed Web Server
43Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Actcvss 8.8epss 8.7%
from disclosure to weapon
Published on NVDOct 27
VulnCheck+874d
exploitation probability
8.7%top 5% of all CVEs
observed exploitation
yesVulnCheck
Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H