VYPR

AdminLTE

by Pi Hole

CVEs (2)

  • CVE-2020-8816HigKEVMay 29, 2020
    risk 0.61cvss 7.2epss 0.78

    Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.

  • CVE-2021-32793MedAug 4, 2021
    risk 0.37cvss 5.7epss 0.01

    Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the function to add domains to blocklists or allowlists is vulnerable to a stored cross-site-scripting vulnerability.…