| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/AdguardTeam/AdGuardHome | ≥ 0.95, < 0.108.0-b.16 | 0.108.0-b.16 |
| adguardhome | = 0.108≥ 0.95, < 0.108 | 0.108 |
In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules.
The file that contains the vulnerable code is no longer present as of v0.108.0-b.16.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free