CVE-2023-0493

Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

7.90% chance of exploitation in the next 30 days, 94th percentile

Published

2023-01-26

Updated

2025-03-31

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/3a73b45c-6f3e-4536-a327-cdfdbc59896f

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51254

References

• CVE Record
• NVD entry

Related

• CVE-2023-0492
• CVE-2023-0495
• CVE-2023-0491
• CVE-2023-0496
• CVE-2023-0490
• CVE-2023-0497