PT-2023-27496 · Litespeed Technologies · Openlitespeed

Publicado 2023-08-14 · Atualizado 2023-08-22 · CVE-2023-40518

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenLiteSpeed versions prior to 1.7.18

Description The issue arises from the software not strictly validating HTTP request headers.

Recommendations For versions prior to 1.7.18, update to version 1.7.18 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2023-40518

Produtos afetados

Openlitespeed

Referências · 7

• https://twitter.com/CVEnew/status/1691199098404089857 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-40518 · Nota de Segurança
• https://openlitespeed.org/release-log/version-1-7-x · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40518 · Nota
• https://twitter.com/VulmonFeeds/status/1691272482932625408 · Publicação no Twitter
• https://litespeedtech.com/products/litespeed-web-server/release-log · Nota
• https://osv.dev/vulnerability/CVE-2023-40518 · Aviso do Fabricante