FINDING A ‘HARMLESS' PI-HOLE VULNERABILITY

Summary from the TLDR Web Dev newsletter

This bug bounty hunter conducted a security audit of the open-source ad blocker Pi-hole and discovered a "harmless" vulnerability in the api.php file. The vulnerability allowed unauthenticated users to change the CPU temperature format displayed on the Pi-hole status page. While considered inconsequential by the Pi-hole team, the bug bounty hunter reported the issue and contributed a fix to the code.