Critical severity9.8NVD Advisory· Published Jan 6, 2020· Updated Jun 17, 2026

CVE-2020-5519

Description

The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration > External App" screen.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Litespeedtech/Openlitespeed
cpe:2.3:a:litespeedtech:openlitespeed:*:*:*:*:*:*:*:*
Range: <1.6.5
OpenLiteSpeed/OpenLiteSpeeddescription
Open Litespeed/Open Litespeedllm-fuzzy
Range: <1.6.5

Patches

Vulnerability mechanics

References

drive.google.com/opennvdPermissions RequiredThird Party Advisory
forum.openlitespeed.org/threads/openlitespeed-v1-6-5-now-available.4047/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000