| Package | Affected versions | Patched versions |
|---|---|---|
| litespeed web server | < 6.3.5 | 6.3.5 |
| openlitespeed | ≤ 1.9.0 |
OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privilege.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free