Improper Neutralization of Equivalent Special Elements

CVE-2023-1149

Medium

5.4/10

Summary

Improper Neutralization of Equivalent Special Elements in BTCPayServer.Client versions through 1.7.2.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: LOW
Scope: CHANGED
User Interaction: REQUIRED
Privileges Required: LOW
Confidentiality Impact: LOW
Availability Impact: NONE

CWE-76 - Improper Neutralization of Equivalent Special Elements

The software properly neutralizes certain special elements, but it improperly neutralizes equivalent special elements.

References

Advisory Timeline

Published Mar 02, 2023