Description
Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| LiteSpeed Technologies | OpenLiteSpeed Web Server | >= 1.6.15, < 1.7.16.1 |
| LiteSpeed Technologies | LiteSpeed Web Server | >= 1.6.15, < 1.7.16.1 |
References
- https://github.com/litespeedtech/ols-dockerfiles/blob/master/template/Dockerfile#L29Exploit, Third Party Advisory
- https://github.com/litespeedtech/ols-dockerfiles/blob/master/template/Dockerfile#L29Exploit, Third Party Advisory
Timeline
- Published
- Oct 27, 2022
- Last modified
- Jun 17, 2026
- NVD status
- Modified