CVE-2021-29448

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-29448
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29448.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-29448
Related
  • GHSA-cwwf-93p7-73j9
Published
2021-04-15T16:15:14.033Z
Modified
2026-04-10T04:36:33.684951Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H CVSS Calculator
Summary
[none]
Details

Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. The Stored XSS exists in the Pi-hole Admin portal, which can be exploited by the malicious actor with the network access to DNS server. See the referenced GitHub security advisory for patch details.

References

Affected packages

Git / github.com/pi-hole/ftl

Affected ranges

Type
GIT
Repo
https://github.com/pi-hole/ftl
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2999e2b57c62b4455187ee9b77840d49df0a8e2e
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
fb9b2744b411cc1a04527b909675447fdab8a471
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.7"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "5.5"
        }
    ]
}
Type
GIT
Repo
https://github.com/pi-hole/pi-hole
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cbfb58f7a283c2a3e7aad95a834a0287175ccb24
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.2.4"
        }
    ]
}

Affected versions

2.*
2.0
2.8
V2.*
V2.5.1
V2.9.1
V2.9.2
v1.*
v1.0
v1.1
v1.10
v1.10.1
v1.10.2
v1.10.3
v1.11
v1.11.1
v1.2
v1.2.1
v1.3
v1.3.1
v1.4
v1.5
v1.5.1
v1.6
v1.7
v1.8
v1.9
v2.*
v2.0
v2.1
v2.10
v2.10.1
v2.10.2
v2.11
v2.11.1
v2.11.2
v2.12
v2.12.1
v2.13
v2.13.1
v2.13.2
v2.2
v2.3
v2.3.1
v2.4
v2.4.1
v2.5
v2.5.2
v2.5.3
v2.6
v2.6.1
v2.6.1.1
v2.6.1.2
v2.6.2
v2.6.3
v2.7
v2.7.1
v2.7.2
v2.7.3
v2.7.4
v2.8
v2.8.1
v2.9
v2.9.1
v2.9.2
v2.9.3
v2.9.4
v2.9.4a
v2.9.5
v3.*
v3.0
v3.0.1
v3.1
v3.1.4
v3.2
v3.2.1
v3.3
v3.3.1
v4.*
v4.0
v4.1
v4.1.1
v4.1.2
v4.2
v4.2.1
v4.2.2
v4.2.3
v4.3
v4.3.1
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.4
v5.*
v5.0
v5.1
v5.1.1
v5.1.2
v5.2
v5.2.1
v5.2.2
v5.2.3
v5.2.4
v5.3
v5.3.1
v5.3.2
v5.3.3
v5.3.4
v5.4
v5.5
v5.5.1
v5.6
v5.7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29448.json"