Vulnerability Description
adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Pi-Hole | Web Interface | < 5.6 |
Related Weaknesses (CWE)
References
- https://github.com/pi-hole/adminlte/commit/cf8602eedd4a31eadb72372fc878c12d342f8PatchThird Party Advisory
- https://huntr.dev/bounties/ac7fd77b-b31b-4d02-aebd-f89ecbae3fceExploitIssue TrackingPatch
- https://github.com/pi-hole/adminlte/commit/cf8602eedd4a31eadb72372fc878c12d342f8PatchThird Party Advisory
- https://huntr.dev/bounties/ac7fd77b-b31b-4d02-aebd-f89ecbae3fceExploitIssue TrackingPatch
FAQ
What is CVE-2021-3706?
CVE-2021-3706 is a vulnerability with a CVSS score of 7.5 (HIGH). adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag
How severe is CVE-2021-3706?
CVE-2021-3706 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-3706?
Check the references section above for vendor advisories and patch information. Affected products include: Pi-Hole Web Interface.