Pi-hole web UI updated to 5.5.1

arevindh / pihole-speedtest

Pihole Speedtest Mod

https://arevindh.github.io/pihole-speedtest/

MIT License

216 stars 22 forks source link

Closed ChrisWNY closed 3 years ago

ChrisWNY commented 3 years ago

Looks like the Web UI received a minor update today to address a couple of security vulnerabilities, 8/4/2021. Pi-hole Core and FTL remain unchanged.

GHSA-g3w6-q4fg-p8x8 - "Stored XSS Vulnerability in the Pi-hole Webinterface" reported by both Dariusz Gońda and @awareseven

GHSA-5cm9-6p3m-v259 - "(Authenticated) Remote Code Execution Possible in Web Interface 5.5" reported by @SchneiderSec

arevindh commented 3 years ago

@ChrisWNY Updated

ChrisWNY commented 3 years ago

Installing and testing now...will close it out shortly.

ChrisWNY commented 3 years ago

All set! Thanks and closing with this comment.