3 matches found
CVE-2020-12620
Pi-hole 4.4 allows a user able to write to /etc/pihole/dns-servers.conf to escalate privileges through command injection shell metacharacters after an IP address...
CVE-2020-12620
Pi-hole 4.4 allows a user able to write to /etc/pihole/dns-servers.conf to escalate privileges through command injection shell metacharacters after an IP address...
CVE-2020-12620
Pi-hole 4.4 is affected by a local privilege-escalation vulnerability in which an attacker able to write to /etc/pihole/dns-servers.conf can inject commands via shell metacharacters after an IP address. This is a command injection in the dns-servers.conf handling that leads to elevated privileges...