Known Vulnerabilities for products from Btcpayserver
Listed below are 17 of the newest known vulnerabilities associated with the vendor "Btcpayserver".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-1270 json | Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3. | 5.4 - MEDIUM | 2023-03-08 | 2024-02-01 |
| CVE-2023-1149 json | Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0. | 5.4 - MEDIUM | 2023-03-02 | 2023-03-10 |
| CVE-2023-0879 json | Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12. | 5.4 - MEDIUM | 2023-02-17 | 2023-10-26 |
| CVE-2023-0810 json | Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11. | 5.4 - MEDIUM | 2023-02-13 | 2023-02-21 |
| CVE-2023-0748 json | Open Redirect in GitHub repository btcpayserver/btcpayserver prior to 1.7.6. | 6.1 - MEDIUM | 2023-02-08 | 2023-10-26 |
| CVE-2023-0747 json | Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6. | 5.4 - MEDIUM | 2023-02-08 | 2023-11-01 |
| CVE-2023-0493 json | Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5. | 8.8 - HIGH | 2023-01-26 | 2023-10-31 |
| CVE-2022-32984 json | BTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a public Point of Sale app is... | 7.5 - HIGH | 2023-01-31 | 2023-02-08 |
| CVE-2021-29251 json | BTCPay Server before 1.0.7.1 mishandles the policy setting in which users can register (in Server Settings > Policies). This ... | 6.5 - MEDIUM | 2021-04-01 | 2021-06-02 |
| CVE-2021-29250 json | BTCPay Server through 1.0.7.0 suffers from a Stored Cross Site Scripting (XSS) vulnerability within the POS Add Products func... | 5.4 - MEDIUM | 2021-05-05 | 2021-05-11 |
| CVE-2021-29249 json | BTCPay Server before 1.0.6.0, when the payment button is used, has a privacy vulnerability. | 7.5 - HIGH | 2021-03-26 | 2021-03-31 |
| CVE-2021-29248 json | BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the Sec... | 5.3 - MEDIUM | 2021-05-05 | 2022-06-28 |
| CVE-2021-29247 json | BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the HTT... | 5.3 - MEDIUM | 2021-05-05 | 2022-06-28 |
| CVE-2021-29246 json | BTCPay Server through 1.0.7.0 suffers from directory traversal, which allows an attacker with admin privileges to achieve cod... | 6.7 - MEDIUM | 2021-05-05 | 2021-05-11 |
| CVE-2021-29245 json | BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key. | 5.3 - MEDIUM | 2021-05-05 | 2021-05-11 |
| CVE-2021-3830 json | btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 5.4 - MEDIUM | 2021-09-26 | 2021-10-01 |
| CVE-2021-3646 json | btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 6.1 - MEDIUM | 2021-09-10 | 2021-09-21 |