CVE-2022-0073

PoC ×2—

CVSS 3.1

8.8 high

EPSS

9%p95

Published

Oct 27, 2022 (Oct 27, 2022)

Modified

Jun 17, 2026

Description

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.

Vendors: litespeedtech
Products: openlitespeed
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.8%)

In the news1 stories

Multiple High-Severity Flaws Affect Widely Used OpenLiteSpeed Web Server Software

The Hacker NewsNov 12, 05:27 UTC · Nov 12, 2022Vulnerability CVE-2022-0072 CVE-2022-0073 CVE-2022-0074