Lucene search
K

CVE-2020-35592

šŸ—“ļøĀ 18 Feb 2021Ā 19:29:40Reported byĀ mitreTypeĀ 
cve
Ā cve
šŸ”—Ā web.nvd.nist.govšŸ‘Ā 42Ā Views🌐 WEB

Pi-hole 5.0, 5.1, and 5.1.1 allows XSS via the Options header to the admin/ URI. A remote user is able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Reflected Cross-Site Scripting attack against other users and steal the session cookie

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2020-35592
18 Feb 202122:50
–circl
CNNVD
Pi-hole č·Øē«™č„šęœ¬ę¼ę“ž
18 Feb 202100:00
–cnnvd
CNVD
Pi-hole cross-site scripting vulnerability (CNVD-2021-14160)
19 Feb 202100:00
–cnvd
Cvelist
CVE-2020-35592
18 Feb 202119:29
–cvelist
EUVD
EUVD-2020-23258
7 Oct 202500:30
–euvd
NVD
CVE-2020-35592
18 Feb 202120:15
–nvd
OpenVAS
Pi-hole Web Interface < 5.4 Multiple Vulnerabilities
17 Feb 202100:00
–openvas
Prion
Cross site scripting
18 Feb 202120:15
–prion
RedhatCVE
CVE-2020-35592
22 May 202517:10
–redhatcve
NVD
Node
OROR
pi-holepi-holeMatch5.1.1
ParameterPositionPathDescriptionCWE
Optionsheaderadmin/Reflected XSS via unsanitized data in the Options header to the admin/ page.CWE-79

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:27Current
5.2Medium risk
Vulners AI Score5.2
CVSS 23.5
CVSS 3.15.4
EPSS0.00172
42