CVE-2023-0493
MEDIUMBtcpayserver Btcpay Server < 1.7.5 - Injection
Title source: ruleDescription
Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Manojkumar J · textwebappsmultiple
https://www.exploit-db.com/exploits/51254
References (3)
Scores
CVSS v3
5.3
EPSS
0.0999
EPSS Percentile
93.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Details
CWE
CWE-76
CWE-74
Status
published
Products (2)
btcpayserver/btcpay_server
< 1.7.5
nuget/BTCPayServer.Client
0 - 1.7.5NuGet
Published
Jan 26, 2023
Tracked Since
Feb 18, 2026