Launchpad.net

CVE 2020-8816

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.

See the CVE page on Mitre.org for more details.