CVE-2021-47903 — LiteSpeed Web Server Enterprise 5.4.11 - Command Injection
LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app configuration interface. Authenticated administrators can in…
Published: 2026-01-23 · CVSS: 8.6 · CVSS 4.0
LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app configuration interface. Authenticated administrators can inject shell commands through the 'Command' parameter in the server configuration, allowing remote code execution via path traversal and bash command injection.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7