CVE-2022-32175: 
NixOS vulnerability analysis and mitigation

AdGuardHome, in versions v0.95 through v0.108.0-b.13, was identified with a Cross-Site Request Forgery (CSRF) vulnerability affecting the custom filtering rules functionality. The vulnerability was disclosed on October 11, 2022, and assigned CVE-2022-32175 (Mend Database).

The vulnerability has a CVSS v3.1 Base Score of 5.4 with the following metrics: Attack Vector (Network), Attack Complexity (Low), Privileges Required (None), User Interaction (Required), Scope (Unchanged), Confidentiality (None), Integrity (Low), and Availability (Low). The weakness is classified as CWE-352: Cross-Site Request Forgery (Mend Database).

When exploited, this vulnerability allows attackers to delete or modify custom filtering rules in AdGuardHome by persuading an authorized user to follow a malicious link. This can result in unauthorized changes to the filtering configuration, potentially affecting the system's security controls (Mend Database).

The vulnerability requires an attacker to craft a malicious link and convince an authenticated administrator to click on it. Once triggered, the attacker can manipulate the custom filtering rules, such as blocking specific domains like 'google.com' (Mend Database).

The vulnerability affects AdGuardHome versions v0.95 through v0.108.0-b.13. Users should upgrade to a newer version of AdGuardHome that contains the fix. The fix was implemented through a code change in the filtering control functionality (GitHub).