` in the field marked with…","datePublished":"2022-07-07T21:55:10+00:00","dateModified":"2025-04-23T18:03:57.709000+00:00","inLanguage":"en","author":{"@type":"Organization","@id":"https://vexday.io/#org","name":"Vexday","url":"https://vexday.io","logo":{"@type":"ImageObject","url":"https://vexday.io/icon.png"}},"publisher":{"@type":"Organization","@id":"https://vexday.io/#org","name":"Vexday","url":"https://vexday.io","logo":{"@type":"ImageObject","url":"https://vexday.io/icon.png"}},"mainEntityOfPage":"https://vexday.io/en/cve/CVE-2022-31029","about":{"@type":"SoftwareApplication","name":"pi-hole AdminLTE"},"keywords":"CVE-2022-31029, pi-hole AdminLTE, CWE-79"}
CVE-2022-31029mediumCWE-79

CVE-2022-31029: falha de média gravidade em pi-hole AdminLTE

Authenticated XSS in Pi-hole AdminLTE

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar AdminLTE

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.9epss 0.5%
AdminLTE is a Pi-hole Dashboard for stats and configuration. In affected versions inserting code like `<script>alert("XSS")</script>` in the field marked with "Domain to look for" and hitting <kbd>enter</kbd> (or clicking on any of the buttons) will execute the script. The user must be logged in to use this vulnerability. Usually only administrators have login access to pi-hole, minimizing the risks. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
pi-hole · AdminLTE
CVEs relacionadas — pi-hole AdminLTE

No mesmo produto, das mais perigosas para as menos.

CVE-2021-32706HIGH(Authenticated) Remote Code Execution Possible in Web Interface 5.5EPSS 60.2%CVE-2022-23513MEDIUMPi-Hole/AdminLTE vulnerable due to improper access control in queryads endpointEPSS 42.3%CVE-2023-23614HIGHImproper session handling of "Remember me for 7 days" functionalityEPSS 1.0%CVE-2021-41175HIGHStored XSS in Client Groups Management (Authenticated)EPSS 0.9%CVE-2021-32793MEDIUMStored XSS Vulnerability in the Pi-hole WebinterfaceEPSS 0.8%CVE-2021-29448HIGHStored DOM XSS in Pi-hole Admin Web InterfaceEPSS 0.7%