CVE:CVE-2021-29448
CNNVD:CNNVD-202104-1178
Pi-hole是Pi-hole公司的一款网络级广告拦截应用程序。
Pi-hole 存在跨站脚本漏洞，该漏洞源于恶意参与者可以通过网络访问DNS服务器利用该门户。
solution:Upgrade pi-hole ftldns to a higher version than 5.7,and avoid the version 5.7; Upgrade pi-hole pi-hole to a higher version than 5.2.4,and avoid the version 5.2.4; Upgrade pi-hole web_interface to a higher version than 5.5,and avoid the version (,5.5)