` in the field marked with \"Domain to look for\" and hitting ent... CVSS 5.9 MEDIUM.", "author": {"@type": "Organization", "name": "White Hats Nepal"}, "publisher": {"@id": "https://blog.pentestnepal.tech/#organization"}, "datePublished": "2022-07-07", "dateModified": "2024-11-21", "mainEntityOfPage": "https://blog.pentestnepal.tech/cve/cve-2022-31029/", "inLanguage": "en"}, {"@type": "FAQPage", "mainEntity": [{"@type": "Question", "name": "What is CVE-2022-31029?", "acceptedAnswer": {"@type": "Answer", "text": "CVE-2022-31029 is a vulnerability with a CVSS score of 5.9 (MEDIUM). AdminLTE is a Pi-hole Dashboard for stats and configuration. In affected versions inserting code like `` in the field marked with \"Domain to look for\" and hitting ent..."}}, {"@type": "Question", "name": "How severe is CVE-2022-31029?", "acceptedAnswer": {"@type": "Answer", "text": "CVE-2022-31029 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown."}}, {"@type": "Question", "name": "Is there a patch for CVE-2022-31029?", "acceptedAnswer": {"@type": "Answer", "text": "Check the references section above for vendor advisories and patch information. Affected products include: Pi-Hole Adminlte."}}]}]}
  1. Home
  2. CVE Database
  3. CVE-2022-31029
MEDIUM · 5.9

CVE-2022-31029

AdminLTE is a Pi-hole Dashboard for stats and configuration. In affected versions inserting code like `<script>alert("XSS")</script>` in the field marked with "Domain to look for" and hitting <kbd>ent...

Vulnerability Description

AdminLTE is a Pi-hole Dashboard for stats and configuration. In affected versions inserting code like `<script>alert("XSS")</script>` in the field marked with "Domain to look for" and hitting <kbd>enter</kbd> (or clicking on any of the buttons) will execute the script. The user must be logged in to use this vulnerability. Usually only administrators have login access to pi-hole, minimizing the risks. Users are advised to upgrade. There are no known workarounds for this issue.

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
Pi-HoleAdminlte< 5.13

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2022-31029?

CVE-2022-31029 is a vulnerability with a CVSS score of 5.9 (MEDIUM). AdminLTE is a Pi-hole Dashboard for stats and configuration. In affected versions inserting code like `<script>alert("XSS")</script>` in the field marked with "Domain to look for" and hitting <kbd>ent...

How severe is CVE-2022-31029?

CVE-2022-31029 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-31029?

Check the references section above for vendor advisories and patch information. Affected products include: Pi-Hole Adminlte.