~ / search / GHSA-33gv-rvgq-gpxp

GHSA-33gv-rvgq-gpxp

Withdrawn on 2023-10-10. GitHub withdrew this advisory; it no longer applies.

Withdrawn Advisory: HTML injections in BTCPayServer

Source: GitHub Advisory Database (reviewed) High CVE-2023-0493

Packages

EcosystemPackageAffectedFixed in
NuGet BTCPayServer.Client < 1.7.5 1.7.5

Details

As written in the advisory (Markdown source, shown as plain text).

## Withdrawn Advisory This advisory has been withdrawn because all of the files affected by this vulnerability lie in the [BTCPayServer folder](https://github.com/btcpayserver/btcpayserver/tree/master/BTCPayServer), which is not in the NuGet ecosystem. The [BTCPayServer folder](https://github.com/btcpayserver/btcpayserver/tree/master/BTCPayServer.Client), corresponding to the [BTCPayServer NuGet entry](https://www.nuget.org/packages/BTCPayServer.Client), does not contain any files that were changed to fix the vulnerability. ## Original Description Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5.

References

External links from the advisory. They lead to third-party sites.