CVE-2021-29250

概要

参考情報

• blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0 · Vendor Advisory
• btcpayserver/btcpayserver release · Release Notes

btcpay server のその他の脆弱性

• CVE-2023-1149中 5.4Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0.
• CVE-2023-0879中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12.
• CVE-2022-32984高 7.5BTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a public Point of Sale app is exposed. The s…
• CVE-2023-0493高 8.8Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5.
• CVE-2021-3830中 5.4btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')