Unrated severityNVD Advisory· Published Oct 27, 2022· Updated May 5, 2025

Authenticated Remote Code Execution in OpenLiteSpeed Web Server

CVE-2022-0073

Description

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Litespeedtech/Openlitespeedllm-fuzzy
Range: >=1.7.0, <1.7.16.1
Litespeedtech/Web Serverllm-fuzzy3 versions
>=1.7.0, <1.7.16.1+ 2 more
- (no CPE)range: >=1.7.0, <1.7.16.1
- (no CPE)range: 1.7.0
- (no CPE)range: 1.7.0

Patches

Vulnerability mechanics

References

github.com/litespeedtech/openlitespeed/blob/v1.7.16.1/dist/admin/html.open/lib/CValidation.phpmitre
github.com/litespeedtech/openlitespeed/blob/v1.7.16/dist/admin/html.open/lib/CValidation.phpmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.007
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000