CVE-2021-32706

Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the "validDomainWildcard" pregmatch filter allows a malicious character through that can be used to execute code, list directories, and...

PT-2021-19872

Name of the Vulnerable Software and Affected Versions Pi-hole versions prior to 5.5.1 Description The issue lies in the validDomainWildcard preg match filter, which allows a malicious character through that can be used to execute code, list directories, and overwrite sensitive files. This is due ...