CVE-2021-3830: falha de baixa gravidade em btcpayserver/btcpayserver
Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.8epss 0.6%
btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
btcpayserver · btcpayserver/btcpayserverCVEs relacionadas — btcpayserver/btcpayserver
No mesmo produto, das mais perigosas para as menos.
CVE-2023-0493MEDIUMImproper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserverEPSS 8.1%CVE-2021-3646MEDIUMCross-site Scripting (XSS) - Reflected in btcpayserver/btcpayserverEPSS 0.8%CVE-2023-0748MEDIUMOpen Redirect in btcpayserver/btcpayserverEPSS 0.6%CVE-2023-0810HIGHCross-site Scripting (XSS) - Stored in btcpayserver/btcpayserverEPSS 0.6%CVE-2023-1149MEDIUMImproper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserverEPSS 0.5%CVE-2023-0879MEDIUMCross-site Scripting (XSS) - Stored in btcpayserver/btcpayserverEPSS 0.5%