Web application abuses : Pi-hole Ad-Blocker < 4.3 Remote Code Execution Vulnerability

Anfälligkeitssuche		Suche in 219043 CVE Beschreibungen und 99761 Test Beschreibungen, Zugriff auf 10,000+ Quellverweise.
	Tests CVE Alle

Test Kennung: 1.3.6.1.4.1.25623.1.0.108588

Kategorie: Web application abuses

Titel: Pi-hole Ad-Blocker < 4.3 Remote Code Execution Vulnerability

Zusammenfassung: The Pi-hole Ad-Blocker is prone to a remote code execution vulnerability; in the web interface.

Beschreibung: Summary:
The Pi-hole Ad-Blocker is prone to a remote code execution vulnerability
in the web interface.

Vulnerability Insight:
A remote code execution could have been triggered by activating some list
(adding or removing white/blacklist entries) via api.php by an authenticated user.

Affected Software/OS:
Pi-hole Ad-Blocker before version 4.3.

Solution:
Update to version 4.3 or later.

CVSS Score:
6.5

CVSS Vector:
AV:N/AC:L/Au:S/C:P/I:P/A:P

Copyright Copyright (C) 2019 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.
Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

Test Kennung:	1.3.6.1.4.1.25623.1.0.108588
Kategorie:	Web application abuses
Titel:	Pi-hole Ad-Blocker < 4.3 Remote Code Execution Vulnerability
Zusammenfassung:	The Pi-hole Ad-Blocker is prone to a remote code execution vulnerability; in the web interface.
Beschreibung:	Summary: The Pi-hole Ad-Blocker is prone to a remote code execution vulnerability in the web interface. Vulnerability Insight: A remote code execution could have been triggered by activating some list (adding or removing white/blacklist entries) via api.php by an authenticated user. Affected Software/OS: Pi-hole Ad-Blocker before version 4.3. Solution: Update to version 4.3 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Copyright	Copyright (C) 2019 Greenbone Networks GmbH