Vulnerabilities > CVE-2021-41175 - Unspecified vulnerability in Pi-Hole web Interface

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

pi-hole

NVD

Published: 2021-10-26

Updated: 2024-11-21

Summary

Pi-hole's Web interface (based on AdminLTE) provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS. Prior to version 5.8, cross-site scripting is possible when adding a client via the groups-clients management page. This issue was patched in version 5.8.

Vulnerable Configurations

Part	Description	Count
Application	Pi-Hole PI Hole WEB Interface - PI Hole WEB Interface 0.1 PI Hole WEB Interface 1.0 PI Hole WEB Interface 1.0.0 PI Hole WEB Interface 1.1 PI Hole WEB Interface 1.1.0 PI Hole WEB Interface 1.1.1 PI Hole WEB Interface 1.1.2 PI Hole WEB Interface 1.1.3 PI Hole WEB Interface 1.1.4 PI Hole WEB Interface 1.1.5 PI Hole WEB Interface 1.1.6 PI Hole WEB Interface 1.1.7 PI Hole WEB Interface 1.2 PI Hole WEB Interface 1.2.1 PI Hole WEB Interface 1.3 PI Hole WEB Interface 1.3.0 PI Hole WEB Interface 1.4 PI Hole WEB Interface 1.4.1 PI Hole WEB Interface 1.4.2 PI Hole WEB Interface 1.4.3 PI Hole WEB Interface 1.4.3.1 PI Hole WEB Interface 1.4.3.1A PI Hole WEB Interface 1.4.4 PI Hole WEB Interface 1.4.4.1 PI Hole WEB Interface 1.4.4.2 PI Hole WEB Interface 2.0.0 PI Hole WEB Interface 2.0.1 PI Hole WEB Interface 2.0.2 PI Hole WEB Interface 2.0.3 PI Hole WEB Interface 2.0.4 PI Hole WEB Interface 2.0.5 PI Hole WEB Interface 2.1.0 PI Hole WEB Interface 2.1.1 PI Hole WEB Interface 2.1.2 PI Hole WEB Interface 2.2.0 PI Hole WEB Interface 2.3 PI Hole WEB Interface 2.3.1 PI Hole WEB Interface 2.4 PI Hole WEB Interface 2.5 PI Hole WEB Interface 2.5.1 PI Hole WEB Interface 2.5.2 PI Hole WEB Interface 3.0 PI Hole WEB Interface 3.0.1 PI Hole WEB Interface 3.0.1A PI Hole WEB Interface 3.1 PI Hole WEB Interface 3.2 PI Hole WEB Interface 3.2.1 PI Hole WEB Interface 3.3 PI Hole WEB Interface 4.0 PI Hole WEB Interface 4.1 PI Hole WEB Interface 4.1.1 PI Hole WEB Interface 4.2 PI Hole WEB Interface 4.3 PI Hole WEB Interface 4.3.2 PI Hole WEB Interface 4.3.3 PI Hole WEB Interface 5.0 PI Hole WEB Interface 5.1 PI Hole WEB Interface 5.1.1 PI Hole WEB Interface 5.2 PI Hole WEB Interface 5.2.1 PI Hole WEB Interface 5.2.2 PI Hole WEB Interface 5.3 PI Hole WEB Interface 5.3.1 PI Hole WEB Interface 5.3.2 PI Hole WEB Interface 5.4 PI Hole WEB Interface 5.5 PI Hole WEB Interface 5.5.1 PI Hole WEB Interface 5.6 PI Hole WEB Interface 5.7	72

Summary

Vulnerable Configurations

References