Improper HTTP Request Header Validation in OpenLiteSpeed by LiteSpeed Technologies
CVE-2023-40518

7.5HIGH

Key Information:

Vendor

Litespeedtech

Status
Openlitespeed
Vendor
CVE Published:
14 August 2023

What is CVE-2023-40518?

OpenLiteSpeed versions prior to 1.7.18 are susceptible to a vulnerability due to inadequate validation of HTTP request headers. This oversight can be exploited to launch various attacks against web applications relying on this server. Implementations using affected versions may face security threats as the vulnerability allows attackers to send malformed or malicious HTTP headers without proper checks, potentially compromising server integrity and exposing sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.litespeedtech.com/products/litespeed-web-serv...
https://openlitespeed.org/release-log/version-1-7-x/

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.