Skip to main content

Improper Neutralization of Equivalent Special Elements

CVE-2023-0493

Severity High
Score 8.8/10

Summary

Improper Neutralization of Equivalent Special Elements in btcpayserver versions prior to 1.7.5.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • LOW
  • HIGH
  • HIGH

CWE-76 - Improper Neutralization of Equivalent Special Elements

The software properly neutralizes certain special elements, but it improperly neutralizes equivalent special elements.

Advisory Timeline

  • Published