CVE-2020-8816
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2020-8816
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8816.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2020-8816
- Published
- 2020-05-29T19:15:10Z
- Modified
- 2024-09-03T03:34:58.856130Z
- Severity
-
- 7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.
- References
-
- http://packetstormsecurity.com/files/157861/Pi-Hole-4.3.2-DHCP-MAC-OS-Command-Execution.html
- http://packetstormsecurity.com/files/158737/Pi-hole-4.3.2-Remote-Code-Execution.html
- https://natedotred.wordpress.com/2020/03/28/cve-2020-8816-pi-hole-remote-code-execution/
- https://github.com/pi-hole/AdminLTE/commits/master
- https://github.com/pi-hole/AdminLTE/pull/1165
- https://github.com/pi-hole/AdminLTE/releases/tag/v4.3.3
- https://twitter.com/Nate_Kappa/status/1243900213665902592?s=20
Affected packages
Git / github.com/pi-hole/adminlte
Affected ranges
- Type
- GIT
- Repo
- https://github.com/pi-hole/adminlte
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
- Type
- GIT
- Repo
- https://github.com/pi-hole/pi-hole
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
0.*
0.1
1.*
1.0
1.1
1.2
1.2.1
1.3
2.*
2.0
2.0.0
2.1.0
2.1.1
2.8
V2.*
V2.5.1
V2.9.1
V2.9.2
v1.*
v1.0.0
v1.1.0
v1.1.1
v1.1.2
v1.1.3
v1.1.4
v1.1.5
v1.1.6
v1.1.7
v1.2
v1.3
v1.4
v1.4.1
v1.4.2
v1.4.3
v1.4.3.1
v1.4.3.1a
v1.4.4
v1.4.4.1
v1.4.4.2
v2.*
v2.0
v2.0.0
v2.0.1
v2.0.2
v2.0.3
v2.0.4
v2.0.5
v2.1
v2.1.0-alpha-1
v2.1.0-beta
v2.1.2
v2.10
v2.10.1
v2.10.2
v2.11
v2.11.1
v2.11.2
v2.12
v2.12.1
v2.13
v2.13.1
v2.13.2
v2.2
v2.2.0
v2.3
v2.3.1
v2.4
v2.5
v2.5.1
v2.5.2
v2.5.3
v2.6
v2.6.1
v2.6.1.1
v2.6.1.2
v2.6.2
v2.6.3
v2.7
v2.7.1
v2.8.1
v2.9
v2.9.3
v2.9.4
v2.9.4a
v2.9.5
v3.*
v3.0
v3.0.1
v3.0.1a
v3.1
v3.1.4
v3.2
v3.2.1
v3.3
v3.3.1
v4.*
v4.0
v4.1
v4.1.1
v4.2
v4.2.1
v4.2.2
v4.3
v4.3.1
v4.3.2
Other
vDev