PT-2023-1420 · Unknown · Btcpay Server

Nicolasdorier · Publicado 2023-01-30 · Atualizado 2023-10-26 · CVE-2023-0748

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BTCPay Server versions prior to 1.7.6

Description The issue is related to an open redirect vulnerability in the BTCPay Server automated billing system, specifically with the handling of the returnUrl parameter. This could allow a remote attacker to conduct phishing attacks using a specially crafted malicious link. The vulnerability may be exploited to redirect users to unintended locations, potentially leading to security breaches.

Recommendations For versions prior to 1.7.6, update to version 1.7.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the returnUrl parameter to minimize the risk of exploitation.

Exploit

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

BDU:2023-00808

CVE-2023-0748

Produtos afetados

Btcpay Server

Referências · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0748.json · Exploit
• 🔥 https://huntr.dev/bounties/1a0403b6-9ec9-4587-b559-b1afba798c86 · Exploit
• https://github.com/btcpayserver/btcpayserver/commit/c2cfa17e9619046b43987627b8429541d2834109 · Nota
• https://github.com/btcpayserver/btcpayserver/pull/4575 · Nota
• https://github.com/btcpayserver/btcpayserver/pull/4575/commits/c2cfa17e9619046b43987627b8429541d2834109 · Correção
• https://bdu.fstec.ru/vul/2023-00808 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-0748 · Aviso do Fabricante
• https://t.me/cvenotify/60038 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-0748 · Nota de Segurança
• https://t.me/cvenotify/43888 · Publicação no Telegram
• https://t.me/cibsecurity/57775 · Publicação no Telegram