title: AdGuardHome - CSRF
description: In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
vendor: AdguardHome
product: AdguardHome
versions:
version: v0.99.0, status: affected, lessThan: unspecified, versionType: custom
version: unspecified, lessThanOrEqual: v0.108.0-b.9, status: affected, versionType: custom
}
metrics:
other: [
type: unknown
content: {'vectorString': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L', 'attackComplexity': 'LOW', 'attackVector': 'NETWORK', 'availabilityImpact': 'LOW', 'confidentialityImpact': 'NONE', 'integrityImpact': 'LOW', 'privilegesRequired': 'NONE', 'scope': 'UNCHANGED', 'userInteraction': 'REQUIRED', 'version': 3.1, 'baseScore': 5.4, 'baseSeverity': 'MEDIUM'}
]