Lucene search

CVE-2023-0879

🗓️ 17 Feb 2023 02:10:15Reported by @huntrdevType

CVE-2023-0879 Cross-site Scripting (XSS) in GitHub repository btcpayserver/btcpayserver

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2023-0879 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver	17 Feb 202300:00	–	cvelist
Prion	Cross site scripting	17 Feb 202302:15	–	prion
NVD	CVE-2023-0879	17 Feb 202302:15	–	nvd
OSV	CVE-2023-0879	17 Feb 202302:15	–	osv
Huntr	File Upload lead to Stored XSS bypass csp	9 Feb 202318:03	–	huntr

Nvd

Node

btcpayserver btcpay_serverRange<1.7.12

[
  {
    "defaultStatus": "unaffected",
    "product": "btcpayserver/btcpayserver",
    "vendor": "btcpayserver",
    "versions": [
      {
        "lessThan": "1.7.12",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.dev/bounties/9464e3c6-961d-4e23-8b3d-07cbb31de541
github	www.github.com/btcpayserver/btcpayserver/pull/4635/commits/f2f3b245c4d8980d8e54e4708c796df82332c3d7

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Feb 2023 02:15Current

5.5Medium risk

Vulners AI Score5.5

CVSS35.4

EPSS0.001

CWE-79