Unrated
LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers.
CVE-2023-40518
First seen on SecPulse
References
- advisory github.com
- advisory nvd.nist.gov
- web openlitespeed.org
- web litespeedtech.com