{"id":"CVE-2021-32706","published":"2021-08-04T17:50:09Z","modified":"2024-08-03T23:25:31Z","title":"(Authenticated) Remote Code Execution Possible in Web Interface 5.5","vendor":"pi-hole","product":"AdminLTE","tier":"core","eol":null,"affectedVersions":[{"vendor":"pi-hole","product":"AdminLTE","versions":["< 5.5.1"]}],"description":{"text":"Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the `validDomainWildcard` preg_match filter allows a malicious character through that can be used to execute code, list directories, and overwrite sensitive files. The issue lies in the fact that one of the periods is not escaped, allowing any character to be used in its place. A patch for this vulnerability was released in version 5.5.1.","provenance":"source","from":"CVE.org"},"summary":{"text":"The Pi-hole Web interface (AdminLTE component) before version 5.5.1 contains a flaw in its validDomainWildcard preg_match filter, where an unescaped period lets an attacker-supplied character pass validation, enabling code injection. An attacker with low-privilege authenticated access to the web interface, over the network and without any user interaction, could execute code, list directories, and overwrite sensitive files.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:12:37Z"},"cvss":{"score":7.6,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.60181,"percentile":0.99133,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":3,"pulses":[{"name":"IOC's found on my pesonal devices; week starting 08/14/23","url":"https://otx.alienvault.com/pulse/65709ffcf3ffe737f8cb8dfd","created":"2023-12-06"},{"name":"IOC's found on my pesonal devices; week starting 08/14/23","url":"https://otx.alienvault.com/pulse/64dd9c1d76a7807782a691d3","created":"2023-08-17"},{"name":"Proof Point Emerging Exploit list","url":"https://otx.alienvault.com/pulse/6399fdc966948f6b537b9762","created":"2022-12-14"}],"provenance":"machine"},"cwes":[{"id":"CWE-94","name":"Improper Control of Generation of Code"}],"references":[{"url":"https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-5cm9-6p3m-v259","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/pi-hole/AdminLTE/releases/tag/v5.5.1","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2021-19502","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-19502","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"metasploit":[{"name":"Pi-Hole Top Domains API Authenticated Exec","module":"auxiliary/admin/http/pihole_domains_api_exec","type":"auxiliary","disclosureDate":"2021-08-04","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/pihole_domains_api_exec.rb"}],"first":{"date":"2021-08-04","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/pihole_domains_api_exec.rb"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2021-08-04","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2021-32706","provenance":"source"},{"date":"2021-08-04","kind":"exploit-public","label":"First public exploit: Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/pihole_domains_api_exec.rb","provenance":"source"}],"speed":{"daysToPublicExploit":0,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":31.5,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.83,"detail":"percentile 0.9913"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":1.37,"detail":"3 pulses"},{"name":"CVSS severity","points":5.32,"detail":"base score 7.6"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}