CVE-2023-0747: Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

Q: What is the severity of CVE-2023-0747?

The severity of CVE-2023-0747 is medium with a CVSS score of 5.4.

Q: How does CVE-2023-0747 affect btcpayserver/btcpayserver?

CVE-2023-0747 affects btcpayserver/btcpayserver versions prior to 1.7.6, allowing for stored cross-site scripting (XSS) attacks.

Q: What is the fix for CVE-2023-0747?

To fix CVE-2023-0747, update btcpayserver/btcpayserver to version 1.7.6 or higher.

Q: What is cross-site scripting (XSS)?

Cross-site scripting (XSS) is a vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users.

Q: Is there any additional information about CVE-2023-0747?

Yes, you can find additional information about CVE-2023-0747 at the following references: [GitHub Pull Request](https://github.com/btcpayserver/btcpayserver/pull/4567/commits/d4e464ad4ef0cbbf61751e70f77865de325dd6cf), [Huntr.dev](https://huntr.dev/bounties/7830b9b4-af2e-44ef-8b00-ee2491d4e7ff).

Published Feb 8, 2023

Updated

Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6.

Affected Software

1 affected component

btcpayserver btcpayserver<1.7.6

Remediation

Patch Available

https://github.com/btcpayserver/btcpayserver/pull/4567/commits/d4e464ad4ef0cbbf61751e70f77865de325dd6cf

Event History

Feb 8, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-0747?

The severity of CVE-2023-0747 is medium with a CVSS score of 5.4.

How does CVE-2023-0747 affect btcpayserver/btcpayserver?

CVE-2023-0747 affects btcpayserver/btcpayserver versions prior to 1.7.6, allowing for stored cross-site scripting (XSS) attacks.

What is the fix for CVE-2023-0747?