CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-05-29
Pi-hole Web AdminLTE v4.3.2 DHCP Static Lease Remote Code Execution Vulnerability (CVE-2020-8816)
[Affected Scope] Pi-hole Web v4.3.2 (AdminLTE) and prior versions
[Impact] A privileged dashboard user can execute arbitrary system commands on the underlying operating system via a crafted DHCP static lease input.
[Mitigation] Immediately upgrade Pi-hole AdminLTE to version v4.3.3 or later, and restrict access to the admin dashboard.