Lucene search

[email protected]CVE-2023-1270

HistoryMar 08, 2023 - 2:15 p.m.

CVE-2023-1270

2023-03-0814:15:09

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-1270

cross-site scripting

github

btcpayserver

nvd

5.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L

3.4 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:M/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

32.2%

JSON

Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3.

CPENameOperatorVersion
btcpayserver:btcpayserverbtcpayserverlt1.8.3
btcpayserver:btcpayserverbtcpayservereq1.0.3.30
btcpayserver:btcpayserverbtcpayservereq1.0.2.46
btcpayserver:btcpayserverbtcpayservereq1.0.3.40
btcpayserver:btcpayserverbtcpayservereq1.0.1.71
btcpayserver:btcpayserverbtcpayservereq1.0.2.39
btcpayserver:btcpayserverbtcpayservereq1.0.1.45
btcpayserver:btcpayserverbtcpayservereq1.0.2.14
btcpayserver:btcpayserverbtcpayservereq1.0.0.57
btcpayserver:btcpayserverbtcpayservereq1.0.3.132

CPE	Name	Operator	Version
btcpayserver:btcpayserver	btcpayserver	lt	1.8.3
btcpayserver:btcpayserver	btcpayserver	eq	1.0.3.30
btcpayserver:btcpayserver	btcpayserver	eq	1.0.2.46
btcpayserver:btcpayserver	btcpayserver	eq	1.0.3.40
btcpayserver:btcpayserver	btcpayserver	eq	1.0.1.71
btcpayserver:btcpayserver	btcpayserver	eq	1.0.2.39
btcpayserver:btcpayserver	btcpayserver	eq	1.0.1.45
btcpayserver:btcpayserver	btcpayserver	eq	1.0.2.14
btcpayserver:btcpayserver	btcpayserver	eq	1.0.0.57
btcpayserver:btcpayserver	btcpayserver	eq	1.0.3.132

Rows per page:

1-10 of 4921

References

github.com/btcpayserver/btcpayserver/commit/7b5ce8f70c060b01990d3f7109e97e0144d878a4

huntr.dev/bounties/ad1f917f-2b25-40ef-9215-c805354c683b

5.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L

3.4 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:M/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

32.2%

JSON

Related for CVE-2023-1270

osv1 prion1 cvelist1 huntr1