BT
Vendor
Btcpayserver
26
CVEs
0
On KEV
0
New 30D
Products
BS8.8
Btcpay Server
Btcpayserver
13 CVEs0 on KEV0 new
BT8.8
btcpayserver/btcpayserver
btcpayserver
9 CVEs0 on KEV0 new
BT6.1
Btcpayserver
Btcpayserver
4 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-1270 | BT btcpayserver/btcpayserver btcpayserver | 5.4 | Mar 8 | Cross-site Scripting in btcpayserver/btcpayserver |
| CVE-2023-1149 | BT btcpayserver/btcpayserver btcpayserver | 5.4 | Mar 2 | Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver |
| CVE-2023-0879 | BT btcpayserver/btcpayserver btcpayserver | 5.4 | Feb 17 | Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver |
| CVE-2023-0810 | BT btcpayserver/btcpayserver btcpayserver | 5.4 | Feb 13 | Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver |
| CVE-2023-0747 | BT btcpayserver/btcpayserver btcpayserver | 5.4 | Feb 8 | Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver |
| CVE-2023-0748 | BT btcpayserver/btcpayserver btcpayserver | 6.1 | Feb 8 | Open Redirect in btcpayserver/btcpayserver |
| CVE-2022-32984 | BS Btcpay Server Btcpayserver | 7.5 | Jan 31 | BTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a public Point of Sale app is exposed |
| CVE-2023-0493 | BT btcpayserver/btcpayserver btcpayserver | 8.8 | Jan 26 | Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver |
| CVE-2021-3830 | BT btcpayserver/btcpayserver btcpayserver | 5.4 | Sep 26 | Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver |
| CVE-2021-3646 | BT btcpayserver/btcpayserver btcpayserver | 6.1 | Sep 10 | Cross-site Scripting (XSS) - Reflected in btcpayserver/btcpayserver |
| CVE-2021-29250 | BS Btcpay Server Btcpayserver | 5.4 | May 5 | BTCPay Server through 1.0.7.0 suffers from a Stored Cross Site Scripting (XSS) vulnerability within the POS Add Products functionality |
| CVE-2021-29248 | BS Btcpay Server Btcpayserver | 5.3 | May 5 | BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the Secure flag for a cookie |
| CVE-2021-29247 | BS Btcpay Server Btcpayserver | 5.3 | May 5 | BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the HTTPOnly flag for a cookie |
| CVE-2021-29246 | BS Btcpay Server Btcpayserver | 6.7 | May 5 | BTCPay Server through 1.0.7.0 suffers from directory traversal, which allows an attacker with admin privileges to achieve code execution |
| CVE-2021-29245 | BS Btcpay Server Btcpayserver | 5.3 | May 5 | BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key |
| CVE-2021-29251 | BS Btcpay Server Btcpayserver | 6.5 | Apr 1 | BTCPay Server before 1.0.7.1 mishandles the policy setting in which users can register (in Server Settings > Policies) |
| CVE-2021-29249 | BS Btcpay Server Btcpayserver | 7.5 | Mar 26 | BTCPay Server before 1.0.6.0, when the payment button is used, has a privacy vulnerability |