Vulnerabilities CVE-2021-47903

CVE-2021-47903

High

Open

TLP:CLEAR

LiteSpeed Web Server Enterprise 5.4.11 - Command Injection

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app configuration interface. Authenticated administrators can inject shell commands through the 'Command' parameter in the server configuration, allowing remote code execution via path traversal and bash command injection.

Details

CVSS Score: 8.6
EPSS Score ⓘ: 1.45%

71th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jan 23, 2026
Last Modified: Jul 15, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.