Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
BTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a public Point of Sale app is exposed. The sensitive information, found in the HTML source code, includes the xpub of the store. Also, if the store isn't using the internal lightning node, the credentials of a lightning node are exposed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BTCPay Server 安全漏洞
Vulnerability Description
BTCPay Server是一个自托管的开源加密货币支付处理器。它是安全的，私有的，不受审查的且免费的。 BTCPay Server 1.3.0至1.5.3版本存在安全漏洞，该漏洞源于其允许远程攻击者在public Point of Sale应用程序暴露时获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A