Web Interface Security Vulnerabilities and Issues — Web Interface CVE List

Lucene search

Pi-holeWeb Interface

5 matches found

CVE•added 2021/04/15 4:15 p.m.•81 views

CVE-2021-29448

Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. The Stored XSS exists in the Pi-hole Admin portal, which can be exploited by the malicious actor with the network access to DNS server. See the referenced GitHub security advisory for patch details.

8.8CVSS7.9AI score0.00303EPSS

CVE•added 2021/10/26 2:15 p.m.•51 views

CVE-2021-41175

Pi-hole's Web interface (based on AdminLTE) provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS. Prior to version 5.8, cross-site scripting is possible when adding a client via the groups-clients management page. This issue was patched in version 5.8.

7.3CVSS5.5AI score0.00425EPSS

CVE•added 2021/09/15 7:15 a.m.•47 views

CVE-2021-3706

adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag

7.5CVSS7.4AI score0.00259EPSS

CVE•added 2021/09/17 7:15 a.m.•43 views

CVE-2021-3811

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

6.7CVSS6.2AI score0.00183EPSS

CVE•added 2021/09/17 7:15 a.m.•33 views

CVE-2021-3812

adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

6.7CVSS6.2AI score0.00183EPSS