CVE-2022-0072: Litespeedtech Openlitespeed

Medium severity, CVSS 5.8. EPSS: 1% chance of exploitation in the next 30 days.

Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1

Affected products

• Litespeedtech Openlitespeed: from 1.6.5, up to and including 1.6.20.1; from 1.7.0, before 1.7.16.1 (fixed in 1.7.16.1); version 1.5.11 only; version 1.5.12 only

Published 2022-10-27. Last modified 2026-06-17.