CVE-2023-1149: falha de média gravidade em btcpayserver/btcpayserver
Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.7epss 0.5%
Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0.
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
Produtos afetados
btcpayserver · btcpayserver/btcpayserverCVEs relacionadas — btcpayserver/btcpayserver
No mesmo produto, das mais perigosas para as menos.
CVE-2023-0493MEDIUMImproper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserverEPSS 8.1%CVE-2021-3646MEDIUMCross-site Scripting (XSS) - Reflected in btcpayserver/btcpayserverEPSS 0.8%CVE-2023-0748MEDIUMOpen Redirect in btcpayserver/btcpayserverEPSS 0.6%CVE-2021-3830LOWCross-site Scripting (XSS) - Stored in btcpayserver/btcpayserverEPSS 0.6%CVE-2023-0810HIGHCross-site Scripting (XSS) - Stored in btcpayserver/btcpayserverEPSS 0.6%CVE-2023-0879MEDIUMCross-site Scripting (XSS) - Stored in btcpayserver/btcpayserverEPSS 0.5%