Описание
Pi-hole's Web interface (based on AdminLTE) provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS. Prior to version 5.8, cross-site scripting is possible when adding a client via the groups-clients management page. This issue was patched in version 5.8.
Ссылки
- PatchThird Party Advisory
- Release NotesThird Party Advisory
- ExploitThird Party Advisory
- PatchThird Party Advisory
- Release NotesThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.8 (исключая)
cpe:2.3:a:pi-hole:web_interface:*:*:*:*:*:*:*:*
EPSS
Процентиль: 62%
0.00425
Низкий
7.3 High
CVSS3
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
EPSS
Процентиль: 62%
0.00425
Низкий
7.3 High
CVSS3
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79