Litespeed Vulnerabilidad

Cronología

Escribe

Producto

Litespeed Technologies OpenLiteSpeed4
LiteSpeed OpenLiteSpeed3
LiteSpeed Technologies LiteSpeed Cache Plugin2
Litespeed Technologies LiteSpeed Web Server2
LiteSpeed QUIC Library1

Contramedidas

Official Fix8
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

Explotabilidad

High0
Functional0
Proof-of-Concept3
Unproven0
Not Defined11

Vector de acceso

Not Defined0
Physical0
Local1
Adjacent3
Network10

Autenticación

Not Defined0
High0
Low8
None6

La interacción del usuario

Not Defined0
Required3
None11

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤64
≤73
≤85
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤53
≤63
≤73
≤85
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤53
≤65
≤74
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤81
≤90
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤62
≤70
≤80
≤94
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k1
<2k9
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k12
<2k1
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (5): LiteSpeed Cache Plugin (3), LiteSpeed Web Server (2), OpenLiteSpeed (7), QUIC (1), QUIC Library (1)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2024-04-167.77.6LiteSpeed Technologies LiteSpeed Cache Plugin escalada de privilegiosWordPress PluginNot DefinedNot Defined0.000430.09CVE-2023-45000
2024-04-166.36.2LiteSpeed Technologies LiteSpeed Cache Plugin cross site scriptingWordPress PluginNot DefinedNot Defined0.000430.00CVE-2023-40000
2024-02-097.67.5LiteSpeed QUIC Library DCID Privilege EscalationSoftware LibraryNot DefinedOfficial Fix0.000630.04CVE-2024-25678
2023-08-156.96.7LiteSpeed OpenLiteSpeed HTTP Request Header escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.000480.02CVE-2023-40518
2023-05-254.84.8Litespeed Technologies LiteSpeed Cache Plugin cross site request forgeryWordPress PluginNot DefinedNot Defined0.000580.02CVE-2022-46800
2022-10-287.57.4Litespeed Technologies OpenLiteSpeed Web Server Container escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.000860.02CVE-2022-0074
2022-10-287.57.4Litespeed Technologies OpenLiteSpeed Web Server Dashboard escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.000600.02CVE-2022-0073
2022-10-285.55.4Litespeed Technologies OpenLiteSpeed Web Server Dashboard directory traversalDesconocidoNot DefinedOfficial Fix0.000690.04CVE-2022-0072
2022-05-125.55.3LiteSpeed QUIC lsquic_qenc_hdl.c Privilege EscalationDesconocidoNot DefinedOfficial Fix0.002130.00CVE-2022-30592
2021-04-088.07.6Litespeed Technologies OpenLiteSpeed escalada de privilegiosDesconocidoProof-of-ConceptNot Defined0.062850.00CVE-2021-26758

4 no se muestran más entradas

Want to stay up to date on a daily basis?

Enable the mail alert feature now!