Skip to content
OpenAdvisories

Product · pi-hole

AdminLTE

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2023-23614

    Improper session handling of "Remember me for 7 days" functionality

    Pi-hole®'s Web interface (based off of AdminLTE) provides a central location to manage your Pi-hole. Versions 4.0 and above, prior to 5.18.3 are vulnerable to Insufficient Session Expiration. Improper use of admin WEBPASSWORD hash as "Remember me for 7 days" …

    pi-hole AdminLTE
  • High 7.3
    CVE-2021-41175

    Stored XSS in Client Groups Management (Authenticated)

    Pi-hole's Web interface (based on AdminLTE) provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS. Prior to version 5.8, cross-site scripting is possible when adding a client via the groups-clients management page. …

    pi-hole AdminLTE
  • High 7.6
    CVE-2021-32706 Public exploit EPSS 60%

    (Authenticated) Remote Code Execution Possible in Web Interface 5.5

    Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the `validDomainWildcard` preg_match filter allows a malicious character through that can be used…

    pi-hole AdminLTE
  • High 7.6
    CVE-2021-29448

    Stored DOM XSS in Pi-hole Admin Web Interface

    Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. The Stored XSS exists in the Pi-hole Admin portal, which can be exploited by the malicious actor with the network access to DNS server. See the referenced GitHub securit…

    pi-hole AdminLTE