Known Vulnerabilities for Btcpay Server by Btcpayserver
Listed below are 10 of the newest known vulnerabilities associated with "Btcpay Server" by "Btcpayserver".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-1149 json | Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0. | 5.4 - MEDIUM | 2023-03-02 | 2023-03-10 |
| CVE-2023-0879 json | Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12. | 5.4 - MEDIUM | 2023-02-17 | 2023-10-26 |
| CVE-2023-0493 json | Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5. | 8.8 - HIGH | 2023-01-26 | 2023-10-31 |
| CVE-2022-32984 json | BTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a public Point of Sale app is... | 7.5 - HIGH | 2023-01-31 | 2023-02-08 |
| CVE-2021-29251 json | BTCPay Server before 1.0.7.1 mishandles the policy setting in which users can register (in Server Settings > Policies). This ... | 6.5 - MEDIUM | 2021-04-01 | 2021-06-02 |
| CVE-2021-29250 json | BTCPay Server through 1.0.7.0 suffers from a Stored Cross Site Scripting (XSS) vulnerability within the POS Add Products func... | 5.4 - MEDIUM | 2021-05-05 | 2021-05-11 |
| CVE-2021-29249 json | BTCPay Server before 1.0.6.0, when the payment button is used, has a privacy vulnerability. | 7.5 - HIGH | 2021-03-26 | 2021-03-31 |
| CVE-2021-29248 json | BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the Sec... | 5.3 - MEDIUM | 2021-05-05 | 2022-06-28 |
| CVE-2021-29247 json | BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the HTT... | 5.3 - MEDIUM | 2021-05-05 | 2022-06-28 |
| CVE-2021-29246 json | BTCPay Server through 1.0.7.0 suffers from directory traversal, which allows an attacker with admin privileges to achieve cod... | 6.7 - MEDIUM | 2021-05-05 | 2021-05-11 |