CVE-2022-32175 - Vulnerability Details

Vendors	Products
Adguard	Adguardhome

Link	Providers
https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265
https://www.mend.io/vulnerability-database/CVE-2022-32175

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-32175", "assignerOrgId": "478c68dd-22c1-4a41-97cd-654224dfacff", "assignerShortName": "Mend", "datePublished": "2022-10-11T14:20:11.178Z", "dateUpdated": "2025-05-20T14:10:22.988Z", "dateReserved": "2022-05-31T00:00:00.000Z"}, "containers": {"cna": {"title": "AdGuardHome - CSRF", "datePublic": "2022-10-11T00:00:00.000Z", "providerMetadata": {"orgId": "478c68dd-22c1-4a41-97cd-654224dfacff", "shortName": "Mend", "dateUpdated": "2022-10-11T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules."}], "affected": [{"vendor": "AdguardHome", "product": "AdguardHome", "versions": [{"version": "v0.99.0", "status": "affected", "lessThan": "unspecified", "versionType": "custom"}, {"version": "unspecified", "lessThanOrEqual": "v0.108.0-b.9", "status": "affected", "versionType": "custom"}]}], "references": [{"url": "https://www.mend.io/vulnerability-database/CVE-2022-32175"}, {"url": "https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265"}], "credits": [{"lang": "en", "value": "Mend Vulnerability Research Team (MVR)"}], "metrics": [{"other": {"type": "unknown", "content": {"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "version": 3.1, "baseScore": 5.4, "baseSeverity": "MEDIUM"}}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-352 Cross-Site Request Forgery (CSRF)", "cweId": "CWE-352"}]}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "source": {"advisory": "https://www.mend.io/vulnerability-database/", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T07:32:55.993Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.mend.io/vulnerability-database/CVE-2022-32175", "tags": ["x_transferred"]}, {"url": "https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265", "tags": ["x_transferred"]}]}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-05-20T14:09:53.701694Z", "id": "CVE-2022-32175", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-20T14:10:22.988Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2022-32175 (string)

assignerOrgId : 478c68dd-22c1-4a41-97cd-654224dfacff (string)

assignerShortName : Mend (string)

datePublished : 2022-10-11T14:20:11.178Z (string)

dateUpdated : 2025-05-20T14:10:22.988Z (string)

dateReserved : 2022-05-31T00:00:00.000Z (string)

}

containers : { »

cna : { »

title : AdGuardHome - CSRF (string)

datePublic : 2022-10-11T00:00:00.000Z (string)

providerMetadata : { »

orgId : 478c68dd-22c1-4a41-97cd-654224dfacff (string)

shortName : Mend (string)

dateUpdated : 2022-10-11T00:00:00.000Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules. (string)

}

]

affected : [ »

0 : { »

vendor : AdguardHome (string)

product : AdguardHome (string)

versions : [ »

0 : { »

version : v0.99.0 (string)

status : affected (string)

lessThan : unspecified (string)

versionType : custom (string)

}

1 : { »

version : unspecified (string)

lessThanOrEqual : v0.108.0-b.9 (string)

status : affected (string)

versionType : custom (string)

}

]

}

]

references : [ »

0 : { »

url : https://www.mend.io/vulnerability-database/CVE-2022-32175 (string)

}

1 : { »

url : https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265 (string)

}

]

credits : [ »

0 : { »

lang : en (string)

value : Mend Vulnerability Research Team (MVR) (string)

}

]

metrics : [ »

0 : { »

other : { »

type : unknown (string)

content : { »

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L (string)

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

version : 3.1 (number)

baseScore : 5.4 (number)

baseSeverity : MEDIUM (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

lang : en (string)

description : CWE-352 Cross-Site Request Forgery (CSRF) (string)

cweId : CWE-352 (string)

}

]

}

]

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

source : { »

advisory : https://www.mend.io/vulnerability-database/ (string)

discovery : UNKNOWN (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T07:32:55.993Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.mend.io/vulnerability-database/CVE-2022-32175 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 5.4 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L (string)

integrityImpact : LOW (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : LOW (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-05-20T14:09:53.701694Z (string)

id : CVE-2022-32175 (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-05-20T14:10:22.988Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.mend.io/vulnerability-database/CVE-2022-32175", "tags": ["x_transferred"]}, {"url": "https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T07:32:55.993Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2022-32175", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-05-20T14:09:53.701694Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-20T14:10:19.133Z"}}], "cna": {"title": "AdGuardHome - CSRF", "source": {"advisory": "https://www.mend.io/vulnerability-database/", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "value": "Mend Vulnerability Research Team (MVR)"}], "metrics": [{"other": {"type": "unknown", "content": {"scope": "UNCHANGED", "version": 3.1, "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}}], "affected": [{"vendor": "AdguardHome", "product": "AdguardHome", "versions": [{"status": "affected", "version": "v0.99.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "versionType": "custom", "lessThanOrEqual": "v0.108.0-b.9"}]}], "datePublic": "2022-10-11T00:00:00.000Z", "references": [{"url": "https://www.mend.io/vulnerability-database/CVE-2022-32175"}, {"url": "https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265"}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "descriptions": [{"lang": "en", "value": "In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-352", "description": "CWE-352 Cross-Site Request Forgery (CSRF)"}]}], "providerMetadata": {"orgId": "478c68dd-22c1-4a41-97cd-654224dfacff", "shortName": "Mend", "dateUpdated": "2022-10-11T00:00:00.000Z"}}}, "cveMetadata": {"cveId": "CVE-2022-32175", "state": "PUBLISHED", "dateUpdated": "2025-05-20T14:10:22.988Z", "dateReserved": "2022-05-31T00:00:00.000Z", "assignerOrgId": "478c68dd-22c1-4a41-97cd-654224dfacff", "datePublished": "2022-10-11T14:20:11.178Z", "assignerShortName": "Mend"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.mend.io/vulnerability-database/CVE-2022-32175 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T07:32:55.993Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 5.4 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L (string)

integrityImpact : LOW (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : LOW (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2022-32175 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-05-20T14:09:53.701694Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-05-20T14:10:19.133Z (string)

}

]

cna : { »

title : AdGuardHome - CSRF (string)

source : { »

advisory : https://www.mend.io/vulnerability-database/ (string)

discovery : UNKNOWN (string)

}

credits : [ »

0 : { »

lang : en (string)

value : Mend Vulnerability Research Team (MVR) (string)

}

]

metrics : [ »

0 : { »

other : { »

type : unknown (string)

content : { »

scope : UNCHANGED (string)

version : 3.1 (number)

baseScore : 5.4 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L (string)

integrityImpact : LOW (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : LOW (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

]

affected : [ »

0 : { »

vendor : AdguardHome (string)

product : AdguardHome (string)

versions : [ »

0 : { »

status : affected (string)

version : v0.99.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : unspecified (string)

versionType : custom (string)

lessThanOrEqual : v0.108.0-b.9 (string)

}

]

}

]

datePublic : 2022-10-11T00:00:00.000Z (string)

references : [ »

0 : { »

url : https://www.mend.io/vulnerability-database/CVE-2022-32175 (string)

}

1 : { »

url : https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265 (string)

}

]

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-352 (string)

description : CWE-352 Cross-Site Request Forgery (CSRF) (string)

}

]

}

]

providerMetadata : { »

orgId : 478c68dd-22c1-4a41-97cd-654224dfacff (string)

shortName : Mend (string)

dateUpdated : 2022-10-11T00:00:00.000Z (string)

}

cveMetadata : { »

cveId : CVE-2022-32175 (string)

state : PUBLISHED (string)

dateUpdated : 2025-05-20T14:10:22.988Z (string)

dateReserved : 2022-05-31T00:00:00.000Z (string)

assignerOrgId : 478c68dd-22c1-4a41-97cd-654224dfacff (string)

datePublished : 2022-10-11T14:20:11.178Z (string)

assignerShortName : Mend (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:adguard:adguardhome:*:*:*:*:*:*:*:*", "matchCriteriaId": "8E695CFB-B1DF-41C1-BA70-7A265433CB0A", "versionEndExcluding": "0.108", "versionStartIncluding": "0.95", "vulnerable": true}, {"criteria": "cpe:2.3:a:adguard:adguardhome:0.108:-:*:*:*:*:*:*", "matchCriteriaId": "14E5C5F8-F953-46F8-8A09-D3ADD8D20D98", "vulnerable": true}, {"criteria": "cpe:2.3:a:adguard:adguardhome:0.108:beta1:*:*:*:*:*:*", "matchCriteriaId": "9817B935-B524-477A-AD09-8FAA10766BB2", "vulnerable": true}, {"criteria": "cpe:2.3:a:adguard:adguardhome:0.108:beta10:*:*:*:*:*:*", "matchCriteriaId": "483D39D7-80FC-44AB-9DFE-AFDAE36D062B", "vulnerable": true}, {"criteria": "cpe:2.3:a:adguard:adguardhome:0.108:beta11:*:*:*:*:*:*", "matchCriteriaId": "254E666F-03B2-4165-8B99-F952DFAB8C9D", "vulnerable": true}, {"criteria": "cpe:2.3:a:adguard:adguardhome:0.108:beta12:*:*:*:*:*:*", "matchCriteriaId": "5A73C9B8-9DA5-408F-9606-56CEF156D778", "vulnerable": true}, {"criteria": "cpe:2.3:a:adguard:adguardhome:0.108:beta2:*:*:*:*:*:*", "matchCriteriaId": "C2FA24D7-69D9-4754-8BFB-4C7FCBD32C21", "vulnerable": true}, {"criteria": "cpe:2.3:a:adguard:adguardhome:0.108:beta3:*:*:*:*:*:*", "matchCriteriaId": "48BDB15F-0B8F-4924-9D10-1D9553E00C14", "vulnerable": true}, {"criteria": "cpe:2.3:a:adguard:adguardhome:0.108:beta4:*:*:*:*:*:*", "matchCriteriaId": "E1D1A5BC-FF61-4DAD-B151-F54744B46F21", "vulnerable": true}, {"criteria": "cpe:2.3:a:adguard:adguardhome:0.108:beta5:*:*:*:*:*:*", "matchCriteriaId": "AF880BA6-46D1-46E2-9CCD-29CB7723B25F", "vulnerable": true}, {"criteria": "cpe:2.3:a:adguard:adguardhome:0.108:beta6:*:*:*:*:*:*", "matchCriteriaId": "81C91E59-C03C-45B9-A453-7921D4345B86", "vulnerable": true}, {"criteria": "cpe:2.3:a:adguard:adguardhome:0.108:beta7:*:*:*:*:*:*", "matchCriteriaId": "DE4E8637-A8F0-411A-9106-6FD4B2B64447", "vulnerable": true}, {"criteria": "cpe:2.3:a:adguard:adguardhome:0.108:beta8:*:*:*:*:*:*", "matchCriteriaId": "27DC4B6A-9C14-4348-AC6E-57EB022467FA", "vulnerable": true}, {"criteria": "cpe:2.3:a:adguard:adguardhome:0.108:beta9:*:*:*:*:*:*", "matchCriteriaId": "58D1AB54-26E8-4A60-91E2-4105E186533B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules."}, {"lang": "es", "value": "En AdGuardHome, versiones v0.95 hasta v0.108.0-b.13, son vulnerables a un ataque de tipo Cross-Site Request Forgery (CSRF), en la funcionalidad custom filtering rules. Un atacante puede persuadir a un usuario autorizado para que siga un enlace malicioso, resultando en una eliminaci\u00f3n/modificaci\u00f3n de las reglas de filtrado personalizadas"}], "id": "CVE-2022-32175", "lastModified": "2025-05-20T14:15:21.440", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.5, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.5, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2022-10-11T15:15:09.920", "references": [{"source": "vulnerabilitylab@mend.io", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265"}, {"source": "vulnerabilitylab@mend.io", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.mend.io/vulnerability-database/CVE-2022-32175"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.mend.io/vulnerability-database/CVE-2022-32175"}], "sourceIdentifier": "vulnerabilitylab@mend.io", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "vulnerabilitylab@mend.io", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:adguard:adguardhome:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8E695CFB-B1DF-41C1-BA70-7A265433CB0A (string)

versionEndExcluding : 0.108 (string)

versionStartIncluding : 0.95 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:adguard:adguardhome:0.108:-:*:*:*:*:*:* (string)

matchCriteriaId : 14E5C5F8-F953-46F8-8A09-D3ADD8D20D98 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:adguard:adguardhome:0.108:beta1:*:*:*:*:*:* (string)

matchCriteriaId : 9817B935-B524-477A-AD09-8FAA10766BB2 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:adguard:adguardhome:0.108:beta10:*:*:*:*:*:* (string)

matchCriteriaId : 483D39D7-80FC-44AB-9DFE-AFDAE36D062B (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:adguard:adguardhome:0.108:beta11:*:*:*:*:*:* (string)

matchCriteriaId : 254E666F-03B2-4165-8B99-F952DFAB8C9D (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:adguard:adguardhome:0.108:beta12:*:*:*:*:*:* (string)

matchCriteriaId : 5A73C9B8-9DA5-408F-9606-56CEF156D778 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:adguard:adguardhome:0.108:beta2:*:*:*:*:*:* (string)

matchCriteriaId : C2FA24D7-69D9-4754-8BFB-4C7FCBD32C21 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:adguard:adguardhome:0.108:beta3:*:*:*:*:*:* (string)

matchCriteriaId : 48BDB15F-0B8F-4924-9D10-1D9553E00C14 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:adguard:adguardhome:0.108:beta4:*:*:*:*:*:* (string)

matchCriteriaId : E1D1A5BC-FF61-4DAD-B151-F54744B46F21 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:adguard:adguardhome:0.108:beta5:*:*:*:*:*:* (string)

matchCriteriaId : AF880BA6-46D1-46E2-9CCD-29CB7723B25F (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:adguard:adguardhome:0.108:beta6:*:*:*:*:*:* (string)

matchCriteriaId : 81C91E59-C03C-45B9-A453-7921D4345B86 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:adguard:adguardhome:0.108:beta7:*:*:*:*:*:* (string)

matchCriteriaId : DE4E8637-A8F0-411A-9106-6FD4B2B64447 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:adguard:adguardhome:0.108:beta8:*:*:*:*:*:* (string)

matchCriteriaId : 27DC4B6A-9C14-4348-AC6E-57EB022467FA (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:adguard:adguardhome:0.108:beta9:*:*:*:*:*:* (string)

matchCriteriaId : 58D1AB54-26E8-4A60-91E2-4105E186533B (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules. (string)

}

1 : { »

lang : es (string)

value : En AdGuardHome, versiones v0.95 hasta v0.108.0-b.13, son vulnerables a un ataque de tipo Cross-Site Request Forgery (CSRF), en la funcionalidad custom filtering rules. Un atacante puede persuadir a un usuario autorizado para que siga un enlace malicioso, resultando en una eliminación/modificación de las reglas de filtrado personalizadas (string)

}

]

id : CVE-2022-32175 (string)

lastModified : 2025-05-20T14:15:21.440 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 5.4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 2.5 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 5.4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 2.5 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2022-10-11T15:15:09.920 (string)

references : [ »

0 : { »

source : vulnerabilitylab@mend.io (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265 (string)

}

1 : { »

source : vulnerabilitylab@mend.io (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://www.mend.io/vulnerability-database/CVE-2022-32175 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://www.mend.io/vulnerability-database/CVE-2022-32175 (string)

}

]

sourceIdentifier : vulnerabilitylab@mend.io (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-352 (string)

}

]

source : vulnerabilitylab@mend.io (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact Low

User Interaction Required

Exploitation poc

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact Low

User Interaction Required

Exploitation poc

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object