Описание
BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the HTTPOnly flag for a cookie.
Ссылки
- Vendor Advisory
- Release NotesThird Party Advisory
- Vendor Advisory
- Release NotesThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.0.7.0 (включая)
cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 66%
0.00515
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-732
Связанные уязвимости
CVSS3: 5.3
github
больше 3 лет назад
BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the HTTPOnly flag for a cookie.
EPSS
Процентиль: 66%
0.00515
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-732