PT-2021-18141 · Unknown · Btcpay Server

Published 2021-05-05 · Updated 2021-05-11 · CVE-2021-29246

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: BTCPay Server versions 1.0.0 through 1.0.7.0

Description: The issue allows an attacker with admin privileges to achieve code execution through directory traversal. This is done by crafting a malicious plugin file with special characters to upload the file outside of the restricted directory.

Recommendations: For BTCPay Server versions 1.0.0 through 1.0.7.0, consider disabling the plugin upload feature until a patch is available to prevent potential code execution. Restrict access to the admin panel to minimize the risk of exploitation by unauthorized users. Avoid using special characters in plugin file names to reduce the risk of directory traversal. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-29246

Affected Products

Btcpay Server

References · 6

• https://osv.dev/vulnerability/CVE-2021-29246 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29246 · Security Note
• https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0 · Vendor Advisory
• https://github.com/btcpayserver/btcpayserver/releases · Note
• https://t.me/cvenotify/14084 · Telegram Post
• https://t.me/cvenotify/14073 · Telegram Post