CVE-2023-0810

CVE-2023-0810 is a stored Cross-site Scripting (XSS) vulnerability in btcpayserver/btcpayserver prior to version 1.7.11. The available documents identify the affected software and version range and state the remediation as upgrading to 1.7.11 or newer. No additional exploit specifics are provided...

CVE-2023-0810 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11...

CVE-2023-0810 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via the returnUrl parameter. Remediation Upgrade BTCPayServer.Client to version 1.7.3 or higher. References - GitHub Commit - GitHub PR Credit: Jefferson Gonzales...

CVE-2023-0748

Open Redirect in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...

Open redirect

Open Redirect in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...

CVE-2023-0747

Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...

CVE-2023-0748 Open Redirect in btcpayserver/btcpayserver

Open Redirect in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...

CVE-2023-0747 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...

CVE-2023-0747 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...

CVE-2023-0747 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...

CVE-2023-0747

CVE-2023-0747 is a stored Cross-site Scripting (XSS) vulnerability affecting BTCPay Server. Multiple sources identify the issue as present in the upstream btcpayserver/btcpayserver prior to version 1.7.6, enabling stored XSS via user-controllable content. The BTCPay project and Red Hat-related en...

CVE-2023-0748 Open Redirect in btcpayserver/btcpayserver

Open Redirect in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...

CVE-2023-0748 Open Redirect in btcpayserver/btcpayserver

Open Redirect in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...

CVE-2023-0748

Open Redirect vulnerability CVE-2023-0748 affects the btcpayserver/btcpayserver project prior to version 1.7.6. Multiple connected documents (NVD, Red Hat advisory, CVE listing, OSV) consistently describe an Open Redirect in that repository/version. The materials provided do not include root-caus...

Improper Neutralization of Equivalent Special Elements

Overview Affected versions of this package are vulnerable to Improper Neutralization of Equivalent Special Elements due to a possible HTML injection via deleting an account's API key that has a payload as its label. Remediation Upgrade BTCPayServer.Client to version 1.7.5 or higher. References -...

Withdrawn Advisory: HTML injections in BTCPayServer

Withdrawn Advisory This advisory has been withdrawn because all of the files affected by this vulnerability lie in the BTCPayServer folder, which is not in the NuGet ecosystem. The BTCPayServer folder, corresponding to the BTCPayServer NuGet entry, does not contain any files that were changed to...

GHSA-33GV-RVGQ-GPXP Withdrawn Advisory: HTML injections in BTCPayServer

Withdrawn Advisory This advisory has been withdrawn because all of the files affected by this vulnerability lie in the BTCPayServer folder, which is not in the NuGet ecosystem. The BTCPayServer folder, corresponding to the BTCPayServer NuGet entry, does not contain any files that were changed to...

Improper Neutralization of Equivalent Special Elements

Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5...