Btcpayserver vulnerabilities
We track 1 vulnerability in Btcpayserver products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 31, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Btcpayserver vulnerabilities
- 7.5 High severity
Btcpay Server: Exposure of Sensitive Information to an Unauthorized Actor
BTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a public Point of Sale app is exposed. The sensitive information, found in the HTML source code, includes the xpub of the store. Also, if the store isn't using the