CVE-2021-3646

概要

参考情報

• btcpayserver/btcpayserver commit fc4e47c · Patch
• huntr.dev/bounties/32e30ecf-31fa-45f6-8552-47250ef0e613 · Exploit

btcpay server のその他の脆弱性

• CVE-2023-1149中 5.4Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0.
• CVE-2023-0879中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12.
• CVE-2022-32984高 7.5BTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a public Point of Sale app is exposed. The s…
• CVE-2023-0493高 8.8Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5.
• CVE-2021-3830中 5.4btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')