{"resultsPerPage":8,"startIndex":0,"totalResults":8,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-03T01:37:50.836","vulnerabilities":[{"cve":{"id":"CVE-2021-29249","sourceIdentifier":"cve@mitre.org","published":"2021-03-26T23:15:11.523","lastModified":"2026-06-17T03:47:26.937","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"BTCPay Server before 1.0.6.0, when the payment button is used, has a privacy vulnerability."},{"lang":"es","value":"BTCPay Server versiones anteriores a 1.0.6.0, cuando es usado el botón de pago, presenta una vulnerabilidad de privacidad."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.6.0","matchCriteriaId":"B6D1B717-841B-4D4B-9FAC-29113EA7288B"}]}]}],"references":[{"url":"https://blog.btcpayserver.org/btcpay-server-1-0-6-0/","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://github.com/btcpayserver/btcpayserver/releases","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"https://blog.btcpayserver.org/btcpay-server-1-0-6-0/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://github.com/btcpayserver/btcpayserver/releases","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-29251","sourceIdentifier":"cve@mitre.org","published":"2021-04-01T05:15:13.233","lastModified":"2026-06-17T03:47:27.173","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"BTCPay Server before 1.0.7.1 mishandles the policy setting in which users can register (in Server Settings > Policies). This affects Docker use cases in which a mail server is configured."},{"lang":"es","value":"BTCPay Server versiones anteriores a 1.0.7.1, maneja inapropiadamente la configuración de política en la que unos usuarios pueden registrarse (en Server Settings ) Policies). Esto afecta a los casos de uso de Docker en los que se configura un servidor de correo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.7.1","matchCriteriaId":"26CEEA4C-3BF8-4319-9ECA-A8E58F05E776"}]}]}],"references":[{"url":"https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://github.com/btcpayserver/btcpayserver/releases/tag/v1.0.7.1","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://github.com/btcpayserver/btcpayserver/releases/tag/v1.0.7.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-29245","sourceIdentifier":"cve@mitre.org","published":"2021-05-05T13:15:07.583","lastModified":"2026-06-17T03:47:26.463","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key."},{"lang":"es","value":"BTCPay Server versiones hasta 1.0.7.0, usa un método débil Next para producir valores pseudoaleatorios para generar una clave API heredada"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-338"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.7.0","matchCriteriaId":"5050DF6F-E9D9-411A-94E4-8B3C96EDB32C"}]}]}],"references":[{"url":"https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://github.com/btcpayserver/btcpayserver/releases","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/btcpayserver/btcpayserver/releases","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-29246","sourceIdentifier":"cve@mitre.org","published":"2021-05-05T13:15:07.650","lastModified":"2026-06-17T03:47:26.583","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"BTCPay Server through 1.0.7.0 suffers from directory traversal, which allows an attacker with admin privileges to achieve code execution. The attacker must craft a malicious plugin file with special characters to upload the file outside of the restricted directory."},{"lang":"es","value":"BTCPay Server versiones hasta 1.0.7.0, sufre un salto de directorio, permitiendo a un atacante con privilegios de administrador lograr una ejecución de código. El atacante debe crear un archivo plugin malicioso con caracteres especiales para cargar el archivo fuera del directorio restringido"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.7.0","matchCriteriaId":"5050DF6F-E9D9-411A-94E4-8B3C96EDB32C"}]}]}],"references":[{"url":"https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://github.com/btcpayserver/btcpayserver/releases","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/btcpayserver/btcpayserver/releases","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-29247","sourceIdentifier":"cve@mitre.org","published":"2021-05-05T13:15:07.677","lastModified":"2026-06-17T03:47:26.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the HTTPOnly flag for a cookie."},{"lang":"es","value":"BTCPay Server versiones hasta 1.0.7.0, podría permitir a un atacante remoto obtener información confidencial, causado por un fallo para ajustar el flag HTTPOnly para una cookie"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.7.0","matchCriteriaId":"5050DF6F-E9D9-411A-94E4-8B3C96EDB32C"}]}]}],"references":[{"url":"https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://github.com/btcpayserver/btcpayserver/releases","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/btcpayserver/btcpayserver/releases","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-29248","sourceIdentifier":"cve@mitre.org","published":"2021-05-05T13:15:07.707","lastModified":"2026-06-17T03:47:26.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the Secure flag for a cookie."},{"lang":"es","value":"BTCPay Server versiones hasta 1.0.7.0, podría permitir a un atacante remoto obtener información confidencial, causada por un fallo en el ajuste de la Secure flag para una cookie"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-311"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.7.0","matchCriteriaId":"5050DF6F-E9D9-411A-94E4-8B3C96EDB32C"}]}]}],"references":[{"url":"https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://github.com/btcpayserver/btcpayserver/releases","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/btcpayserver/btcpayserver/releases","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-29250","sourceIdentifier":"cve@mitre.org","published":"2021-05-05T13:15:07.787","lastModified":"2026-06-17T03:47:27.053","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"BTCPay Server through 1.0.7.0 suffers from a Stored Cross Site Scripting (XSS) vulnerability within the POS Add Products functionality. This enables cookie stealing."},{"lang":"es","value":"BTCPay Server versiones hasta 1.0.7.0, sufre una vulnerabilidad de tipo Cross Site Scripting (XSS) almacenado dentro de la funcionalidad POS Add Products. Esto permite el robo de cookies"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.7.0","matchCriteriaId":"5050DF6F-E9D9-411A-94E4-8B3C96EDB32C"}]}]}],"references":[{"url":"https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://github.com/btcpayserver/btcpayserver/releases","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/btcpayserver/btcpayserver/releases","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-32984","sourceIdentifier":"cve@mitre.org","published":"2023-01-31T22:15:08.000","lastModified":"2026-06-17T04:48:20.020","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"BTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a public Point of Sale app is exposed. The sensitive information, found in the HTML source code, includes the xpub of the store. Also, if the store isn't using the internal lightning node, the credentials of a lightning node are exposed."},{"lang":"es","value":"BTCPay Server v1.3.0 a v1.5.3 permite a un atacante remoto obtener información confidencial cuando se expone una aplicación de punto de venta pública. La información confidencial, que se encuentra en el código fuente HTML, incluye el xpub de la tienda. Además, si la tienda no utiliza el nodo Lightning interno, las credenciales de un nodo Lightning quedan expuestas."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-27T18:38:06.949978Z","id":"CVE-2022-32984","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*","versionStartIncluding":"1.3.0","versionEndIncluding":"1.5.3","matchCriteriaId":"8195AB97-8ABD-4422-81E8-8D0D4B97268A"}]}]}],"references":[{"url":"https://blog.btcpayserver.org/btcpay-server-cve-2022-32984/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://blog.btcpayserver.org/btcpay-server-cve-2022-32984/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}