CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11108

The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abused for Remote Code Execution by writing to a PHP file in the web directory. (Also, it can be used in conjunction with the sudo rule for the www-data user to escalate privileges to root.) The code error is in gravity_DownloadBlocklistFromUrl in gravity.sh.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.9

EPSS Ranking 99.5%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 9.0

References

Products affected by CVE-2020-11108

Pi-Hole » Pi-Hole » Version: 2.0

cpe:2.3:a:pi-hole:pi-hole:2.0
Pi-Hole » Pi-Hole » Version: 2.1

cpe:2.3:a:pi-hole:pi-hole:2.1
Pi-Hole » Pi-Hole » Version: 2.10

cpe:2.3:a:pi-hole:pi-hole:2.10
Pi-Hole » Pi-Hole » Version: 2.10.2

cpe:2.3:a:pi-hole:pi-hole:2.10.2
Pi-Hole » Pi-Hole » Version: 2.11

cpe:2.3:a:pi-hole:pi-hole:2.11
Pi-Hole » Pi-Hole » Version: 2.11.1

cpe:2.3:a:pi-hole:pi-hole:2.11.1
Pi-Hole » Pi-Hole » Version: 2.11.2

cpe:2.3:a:pi-hole:pi-hole:2.11.2
Pi-Hole » Pi-Hole » Version: 2.12

cpe:2.3:a:pi-hole:pi-hole:2.12
Pi-Hole » Pi-Hole » Version: 2.12.1

cpe:2.3:a:pi-hole:pi-hole:2.12.1
Pi-Hole » Pi-Hole » Version: 2.13

cpe:2.3:a:pi-hole:pi-hole:2.13
Pi-Hole » Pi-Hole » Version: 2.13.1

cpe:2.3:a:pi-hole:pi-hole:2.13.1
Pi-Hole » Pi-Hole » Version: 2.13.2

cpe:2.3:a:pi-hole:pi-hole:2.13.2
Pi-Hole » Pi-Hole » Version: 2.2

cpe:2.3:a:pi-hole:pi-hole:2.2
Pi-Hole » Pi-Hole » Version: 2.3

cpe:2.3:a:pi-hole:pi-hole:2.3
Pi-Hole » Pi-Hole » Version: 2.4

cpe:2.3:a:pi-hole:pi-hole:2.4
Pi-Hole » Pi-Hole » Version: 2.5

cpe:2.3:a:pi-hole:pi-hole:2.5
Pi-Hole » Pi-Hole » Version: 2.5.1

cpe:2.3:a:pi-hole:pi-hole:2.5.1
Pi-Hole » Pi-Hole » Version: 2.5.2

cpe:2.3:a:pi-hole:pi-hole:2.5.2
Pi-Hole » Pi-Hole » Version: 2.5.3

cpe:2.3:a:pi-hole:pi-hole:2.5.3
Pi-Hole » Pi-Hole » Version: 2.6

cpe:2.3:a:pi-hole:pi-hole:2.6
Pi-Hole » Pi-Hole » Version: 2.6.1

cpe:2.3:a:pi-hole:pi-hole:2.6.1
Pi-Hole » Pi-Hole » Version: 2.6.1.1

cpe:2.3:a:pi-hole:pi-hole:2.6.1.1
Pi-Hole » Pi-Hole » Version: 2.6.1.2

cpe:2.3:a:pi-hole:pi-hole:2.6.1.2
Pi-Hole » Pi-Hole » Version: 2.6.2

cpe:2.3:a:pi-hole:pi-hole:2.6.2
Pi-Hole » Pi-Hole » Version: 2.6.3

cpe:2.3:a:pi-hole:pi-hole:2.6.3
Pi-Hole » Pi-Hole » Version: 2.7

cpe:2.3:a:pi-hole:pi-hole:2.7
Pi-Hole » Pi-Hole » Version: 2.7.1

cpe:2.3:a:pi-hole:pi-hole:2.7.1
Pi-Hole » Pi-Hole » Version: 2.8

cpe:2.3:a:pi-hole:pi-hole:2.8
Pi-Hole » Pi-Hole » Version: 2.8.1

cpe:2.3:a:pi-hole:pi-hole:2.8.1
Pi-Hole » Pi-Hole » Version: 2.9

cpe:2.3:a:pi-hole:pi-hole:2.9
Pi-Hole » Pi-Hole » Version: 2.9.1

cpe:2.3:a:pi-hole:pi-hole:2.9.1
Pi-Hole » Pi-Hole » Version: 2.9.2

cpe:2.3:a:pi-hole:pi-hole:2.9.2
Pi-Hole » Pi-Hole » Version: 2.9.3

cpe:2.3:a:pi-hole:pi-hole:2.9.3
Pi-Hole » Pi-Hole » Version: 2.9.4

cpe:2.3:a:pi-hole:pi-hole:2.9.4
Pi-Hole » Pi-Hole » Version: 2.9.5

cpe:2.3:a:pi-hole:pi-hole:2.9.5
Pi-Hole » Pi-Hole » Version: 3.0

cpe:2.3:a:pi-hole:pi-hole:3.0
Pi-Hole » Pi-Hole » Version: 3.0.1

cpe:2.3:a:pi-hole:pi-hole:3.0.1
Pi-Hole » Pi-Hole » Version: 3.1

cpe:2.3:a:pi-hole:pi-hole:3.1
Pi-Hole » Pi-Hole » Version: 3.1.4

cpe:2.3:a:pi-hole:pi-hole:3.1.4
Pi-Hole » Pi-Hole » Version: 3.2

cpe:2.3:a:pi-hole:pi-hole:3.2
Pi-Hole » Pi-Hole » Version: 3.2.1

cpe:2.3:a:pi-hole:pi-hole:3.2.1
Pi-Hole » Pi-Hole » Version: 3.3

cpe:2.3:a:pi-hole:pi-hole:3.3
Pi-Hole » Pi-Hole » Version: 3.3.1

cpe:2.3:a:pi-hole:pi-hole:3.3.1
Pi-Hole » Pi-Hole » Version: 4.0

cpe:2.3:a:pi-hole:pi-hole:4.0
Pi-Hole » Pi-Hole » Version: 4.1

cpe:2.3:a:pi-hole:pi-hole:4.1
Pi-Hole » Pi-Hole » Version: 4.1.1

cpe:2.3:a:pi-hole:pi-hole:4.1.1
Pi-Hole » Pi-Hole » Version: 4.2

cpe:2.3:a:pi-hole:pi-hole:4.2
Pi-Hole » Pi-Hole » Version: 4.2.1

cpe:2.3:a:pi-hole:pi-hole:4.2.1
Pi-Hole » Pi-Hole » Version: 4.2.2

cpe:2.3:a:pi-hole:pi-hole:4.2.2
Pi-Hole » Pi-Hole » Version: 4.3

cpe:2.3:a:pi-hole:pi-hole:4.3
Pi-Hole » Pi-Hole » Version: 4.3.1

cpe:2.3:a:pi-hole:pi-hole:4.3.1
Pi-Hole » Pi-Hole » Version: 4.3.2

cpe:2.3:a:pi-hole:pi-hole:4.3.2
Pi-Hole » Pi-Hole » Version: 4.3.3

cpe:2.3:a:pi-hole:pi-hole:4.3.3
Pi-Hole » Pi-Hole » Version: 4.3.4

cpe:2.3:a:pi-hole:pi-hole:4.3.4
Pi-Hole » Pi-Hole » Version: 4.3.5

cpe:2.3:a:pi-hole:pi-hole:4.3.5
Pi-Hole » Pi-Hole » Version: 4.4

cpe:2.3:a:pi-hole:pi-hole:4.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11108

Products

Pricing

Contact Us