| Package | Affected versions | Patched versions |
|---|---|---|
| btcpay server | ≤ 1.0.7.0 |
BTCPay Server through 1.0.7.0 suffers from directory traversal, which allows an attacker with admin privileges to achieve code execution. The attacker must craft a malicious plugin file with special characters to upload the file outside of the restricted directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free