4 ms·
Regarding the older CVE-2020-8816: The code sent in the request is executed using sudo. From there, the code can use curl/wget to download a script from a speci
by drjasonharrison 6y ago
Regarding the older CVE-2020-8816:
The code sent in the request is executed using sudo. From there, the code can use curl/wget to download a script from a specified server, and execute the script as root and take over the device.
For this CVE, here is a description:
https://frichetten.com/blog/cve-2020-11108-pihole-rce/ https://frichetten.com/blog/cve-2020-11108-pihole-rce/