adminlte vulnerabilities and fixes
Recent CVEs affecting adminlte, with upgrade or downgrade steps. 3 tracked.
adminlte has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-02-07. Highest priority: CVE-2021-36471 (score 59/100).
- CVE-2022-31029 MEDIUM 5.9 UPGRADE AdminLTE is a Pi-hole Dashboard for stats and configuration
- CVE-2022-23513 MEDIUM 5.3 UPGRADE Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats a
- CVE-2021-36471 CRITICAL 9.8 DOWNGRADE Directory Traversal vulnerability in AdminLTE 3.1.0 allows remote attackers to gain escalated privilege and vi
FAQ
How do I fix adminlte vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is adminlte being exploited right now?
None of the tracked adminlte CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which adminlte CVE should I patch first?
CVE-2021-36471 currently ranks highest (59/100): Directory Traversal vulnerability in AdminLTE 3.1.0 allows remote attackers to gain escalated privilege and vi.