Vulnerability Details : CVE-2022-32175
Potential exploit
In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules.
Vulnerability category: Cross-site request forgery (CSRF)
Products affected by CVE-2022-32175
- cpe:2.3:a:adguard:adguardhome:*:*:*:*:*:*:*:*
- cpe:2.3:a:adguard:adguardhome:0.108:beta1:*:*:*:*:*:*
- cpe:2.3:a:adguard:adguardhome:0.108:beta2:*:*:*:*:*:*
- cpe:2.3:a:adguard:adguardhome:0.108:beta3:*:*:*:*:*:*
- cpe:2.3:a:adguard:adguardhome:0.108:beta4:*:*:*:*:*:*
- cpe:2.3:a:adguard:adguardhome:0.108:beta5:*:*:*:*:*:*
- cpe:2.3:a:adguard:adguardhome:0.108:beta6:*:*:*:*:*:*
- cpe:2.3:a:adguard:adguardhome:0.108:beta7:*:*:*:*:*:*
- cpe:2.3:a:adguard:adguardhome:0.108:beta8:*:*:*:*:*:*
- cpe:2.3:a:adguard:adguardhome:0.108:beta9:*:*:*:*:*:*
- cpe:2.3:a:adguard:adguardhome:0.108:beta10:*:*:*:*:*:*
- cpe:2.3:a:adguard:adguardhome:0.108:beta11:*:*:*:*:*:*
- cpe:2.3:a:adguard:adguardhome:0.108:beta12:*:*:*:*:*:*
- cpe:2.3:a:adguard:adguardhome:0.108:-:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2022-32175
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 9 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2022-32175
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.4
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L |
2.8
|
2.5
|
134c704f-9b21-4f2e-91b3-4a467353bcc0 | 2025-05-20 |
|
5.4
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L |
2.8
|
2.5
|
NIST | |
|
5.4
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L |
2.8
|
2.5
|
Mend |
CWE ids for CVE-2022-32175
-
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.Assigned by: vulnerabilitylab@mend.io (Secondary)
References for CVE-2022-32175
-
https://github.com/AdguardTeam/AdGuardHome/blob/v0.108.0-b.13/internal/home/controlfiltering.go#L265
AdGuardHome/controlfiltering.go at v0.108.0-b.13 · AdguardTeam/AdGuardHome · GitHubExploit;Third Party Advisory
-
https://www.mend.io/vulnerability-database/CVE-2022-32175
CVE-2022-32175 | Mend Vulnerability DatabaseExploit;Third Party Advisory
Jump to