CVE-2020-12620

Summary

Pi-hole 4.4 allows a user able to write to /etc/pihole/dns-servers.conf to escalate privileges through command injection (shell metacharacters after an IP address).

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/pi-hole/pi-hole
• https://pi-hole.net/
• https://0xpanic.github.io/2020/07/21/Pihole.html

References

• https://github.com/pi-hole/pi-hole
• https://pi-hole.net/
• https://0xpanic.github.io/2020/07/21/Pihole.html

• ←Previous
• Next→