PT-2023-16851 · Unknown · Btcpay Server

CVE-2023-1270

Publicado

2023-03-08

Atualizado

2024-02-01

CVSS v3.1

5.1

Média

Vetor

AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions btcpayserver/btcpayserver versions prior to 1.8.3

Description The issue concerns Cross-site Scripting and Command Injection in the GitHub repository btcpayserver/btcpayserver.

Recommendations For versions prior to 1.8.3, update to version 1.8.3 or later to resolve the issue.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2023-1270

Btcpay Server