CVE-2023-1149

Description

References

• btcpayserver/btcpayserver commit ddb125f · Patch
• huntr.dev/bounties/2e734209-d7b0-4f57-a8be-c65c82208f2f · Exploit

More vulnerabilities in btcpay server

• CVE-2023-0879MEDIUM 5.4Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12.
• CVE-2022-32984HIGH 7.5BTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a public Point of Sale app is exposed. The s…
• CVE-2023-0493HIGH 8.8Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5.
• CVE-2021-3830MEDIUM 5.4btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-3646MEDIUM 6.1btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')