Security Advisory

CVE-2024-34361

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-07-05 18:30:01

Last updated 2024-08-02 02:51:10

Assigner GitHub_M

State PUBLISHED

Description

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. A vulnerability in versions prior to 5.18.3 allows an authenticated user to make internal requests to the server via the `gravity_DownloadBlocklistFromUrl()` function. Depending on some circumstances, the vulnerability could lead to remote command execution. Version 5.18.3 contains a patch for this issue.

← Browse all CVEs View on cve.org ↗