Lucene search
GoogleOSV:CVE-2020-35592HistoryFeb 18, 2021 - 8:15 p.m.
CVE-2020-35592
2021-02-1820:15:12
Google
osv.dev
5
Pi-hole 5.0, 5.1, and 5.1.1 allows XSS via the Options header to the admin/ URI. A remote user is able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Reflected Cross-Site Scripting attack against other users and steal the session cookie.
Related
cve
cve
CVE-2020-35592
2021-02-18 20:15:12
prion
prion
Cross site scripting
2021-02-18 20:15:00
cvelist
cvelist
CVE-2020-35592
2021-02-18 19:29:40
nvd
nvd
CVE-2020-35592
2021-02-18 20:15:12
openvas
openvas
Pi-hole Web Interface < 5.4 Multiple Vulnerabilities
2021-02-17 00:00:00