CVE-2023-0879

Description

References

• btcpayserver/btcpayserver#4635 · Patch
• huntr.dev/bounties/9464e3c6-961d-4e23-8b3d-07cbb31de541 · Exploit

btcpay server의 다른 취약점

• CVE-2023-1149보통 5.4Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0.
• CVE-2022-32984높음 7.5BTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a public Point of Sale app is exposed. The s…
• CVE-2023-0493높음 8.8Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5.
• CVE-2021-3830보통 5.4btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-3646보통 6.1btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')