Skip to content
OpenAdvisories

Product · pi-hole

AdminLTE

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2022-23513 Public exploit EPSS 42%

    Pi-Hole/AdminLTE vulnerable due to improper access control in queryads endpoint

    Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more. In case of an attack, the threat actor will obtain the ability to perform an unauthorized query for blocked domains on `queryads` endpoint. …

    pi-hole AdminLTE
  • High 7.6
    CVE-2021-32706 Public exploit EPSS 60%

    (Authenticated) Remote Code Execution Possible in Web Interface 5.5

    Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the `validDomainWildcard` preg_match filter allows a malicious character through that can be used…

    pi-hole AdminLTE