- Vendor / Project
- Pi-hole
- Product
- AdminLTE
- Date added
- Dec 10, 2021
- Due date
- Jun 10, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-78
Description
Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.
Required action
Apply updates per vendor instructions.