CVE-2024-44069

Published: 2024-08-19T02:15Z

Last Modified: 2024-10-29T21:35Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Pi-hole before 6 allows unauthenticated admin/api.php?setTempUnit= calls to change the temperature units of the web dashboard. NOTE: the supplier reportedly does "not consider the bug a security issue" but the specific motivation for letting arbitrary persons change the value (Celsius, Fahrenheit, or Kelvin), seen by the device owner, is unclear. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt