Skip to content
OpenAdvisories

Product · pi-hole

AdminLTE

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2022-23513 Public exploit EPSS 42%

    Pi-Hole/AdminLTE vulnerable due to improper access control in queryads endpoint

    Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more. In case of an attack, the threat actor will obtain the ability to perform an unauthorized query for blocked domains on `queryads` endpoint. …

    pi-hole AdminLTE
  • Medium 5.9
    CVE-2022-31029

    Authenticated XSS in Pi-hole AdminLTE

    AdminLTE is a Pi-hole Dashboard for stats and configuration. In affected versions inserting code like `<script>alert("XSS")</script>` in the field marked with "Domain to look for" and hitting <kbd>enter</kbd> (or clicking on any of the buttons) will execute t…

    pi-hole AdminLTE
  • Medium 5.7
    CVE-2021-32793

    Stored XSS Vulnerability in the Pi-hole Webinterface

    Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the function to add domains to blocklists or allowlists is vulnerable to a stored cross-site-scri…

    pi-hole AdminLTE