PT-2023-1420 · Unknown · Btcpay Server

Nicolasdorier · Published 2023-01-30 · Updated 2023-10-26 · CVE-2023-0748

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BTCPay Server versions prior to 1.7.6

Description The issue is related to an open redirect vulnerability in the BTCPay Server automated billing system, specifically with the handling of the returnUrl parameter. This could allow a remote attacker to conduct phishing attacks using a specially crafted malicious link. The vulnerability may be exploited to redirect users to unintended locations, potentially leading to security breaches.

Recommendations For versions prior to 1.7.6, update to version 1.7.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the returnUrl parameter to minimize the risk of exploitation.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BDU:2023-00808

CVE-2023-0748

Affected Products

Btcpay Server

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0748.json · Exploit
• 🔥 https://huntr.dev/bounties/1a0403b6-9ec9-4587-b559-b1afba798c86 · Exploit
• https://github.com/btcpayserver/btcpayserver/pull/4575/commits/c2cfa17e9619046b43987627b8429541d2834109 · Patch
• https://bdu.fstec.ru/vul/2023-00808 · Security Note
• https://osv.dev/vulnerability/CVE-2023-0748 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0748 · Security Note
• https://github.com/btcpayserver/btcpayserver/commit/c2cfa17e9619046b43987627b8429541d2834109 · Note
• https://github.com/btcpayserver/btcpayserver/pull/4575 · Note
• https://t.me/cvenotify/60038 · Telegram Post
• https://t.me/cvenotify/43888 · Telegram Post
• https://t.me/cibsecurity/57775 · Telegram Post