CVE-2024-28247 allows authenticated Pi-hole users to read arbitrary internal server files with elevated privileges. This vulnerability arises from improper handling of local file updates within the "Adslists" feature. Specifically, the application inadvertently displays lines from local files containing non-domain data. Though the CVSS score is 0, indicating no impact, the SOCRadar Vulnerability Risk Score (SVRS) of 30 highlights a potential risk due to active exploits available. Exploitation grants unauthorized access to sensitive server information, enabling further malicious activity. This flaw underscores the importance of careful input validation and privilege management, emphasizing the need to update to version 5.18 which addresses the security flaw. While not critical based on SVRS, the presence of an available exploit means that admins should still prioritize patching.