writeups.xyz / Unit 42 Finds Three Vulnerabilities in OpenLiteSpeed Web Server

Submitter : c2a

Date: 10 November 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• OS Command Injection
• Path Traversal
• Local Privilege Escalation

Programs :

• LiteSpeed

Authors :

• Artur Avetisyan (@3v1LMonk3y)

Link :
https://unit42.paloaltonetworks.com/openlitespeed-vulnerabilities/