Improper Neutralization of Equivalent Special Elements

CVE-2023-0493

High

8.8/10

Summary

Improper Neutralization of Equivalent Special Elements in btcpayserver versions prior to 1.7.3.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: LOW
Confidentiality Impact: HIGH
Availability Impact: HIGH

CWE-76 - Improper Neutralization of Equivalent Special Elements

The software properly neutralizes certain special elements, but it improperly neutralizes equivalent special elements.

References

Advisory Timeline

Published Jan 26, 2023