Advisories · Technology

pi-hole AdminLTE.

Every CVE that names pi-hole AdminLTE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-23614 CVE record

CVSS 8.8 High

Improper session handling of "Remember me for 7 days" functionality
- pi-hole AdminLTE
- Authentication bypass
- CWE-836
Not analysed yet 26 Jan 2023
CVE-2022-23513 CVE record

CVSS 5.3 Medium

Pi-Hole/AdminLTE vulnerable due to improper access control in queryads endpoint
- pi-hole AdminLTE
- Broken access control
Not analysed yet 22 Dec 2022
CVE-2022-31029 CVE record

CVSS 5.9 Medium

Authenticated XSS in Pi-hole AdminLTE
- pi-hole AdminLTE
- Cross-site scripting (XSS)
Not analysed yet 7 Jul 2022
CVE-2021-41175 CVE record

CVSS 7.3 High

Stored XSS in Client Groups Management (Authenticated)
- pi-hole AdminLTE
- Cross-site scripting (XSS)
Not analysed yet 26 Oct 2021
CVE-2021-3812 CVE record

CVSS 6.7 Medium

Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte
- pi-hole/adminlte
- Cross-site scripting (XSS)
Not analysed yet 17 Sept 2021
CVE-2021-3811 CVE record

CVSS 6.7 Medium

Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte
- pi-hole/adminlte
- Cross-site scripting (XSS)
Not analysed yet 17 Sept 2021
CVE-2021-3706 CVE record

CVSS 7.4 High

Sensitive Cookie Without 'HttpOnly' Flag in pi-hole/adminlte
- pi-hole/adminlte
- CWE-1004
Not analysed yet 15 Sept 2021
CVE-2021-32793 CVE record

CVSS 5.7 Medium

Stored XSS Vulnerability in the Pi-hole Webinterface
- pi-hole AdminLTE
- Cross-site scripting (XSS)
Not analysed yet 4 Aug 2021
CVE-2021-32706 CVE record

CVSS 7.6 HighCritical · CVSS 7+ and EPSS

(Authenticated) Remote Code Execution Possible in Web Interface 5.5
- pi-hole AdminLTE
- Code injection
Not analysed yet 4 Aug 2021
CVE-2021-29448 CVE record

CVSS 7.6 High

Stored DOM XSS in Pi-hole Admin Web Interface
- pi-hole AdminLTE
- Cross-site scripting (XSS)
Not analysed yet 15 Apr 2021