CVE-2023-0493

Description

Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5.

Affected Platforms

Weakness Type

CWE-76, CWE-74

References

• http://packetstormsecurity.com/files/171732/BTCPay-Server-1.7.4-HTML-Injection.h…
• https://github.com/btcpayserver/btcpayserver/pull/4545/commits/02070d65836cd2462…
• https://huntr.dev/bounties/3a73b45c-6f3e-4536-a327-cdfdbc59896f
• http://packetstormsecurity.com/files/171732/BTCPay-Server-1.7.4-HTML-Injection.h…
• https://github.com/btcpayserver/btcpayserver/pull/4545/commits/02070d65836cd2462…
• https://huntr.dev/bounties/3a73b45c-6f3e-4536-a327-cdfdbc59896f