Update CVE-2023-1270.json

This commit is contained in:
Ben Harvie 2023-04-26 08:09:46 -07:00 committed by GitHub
parent ee9aa1b56b
commit 400a10d5c6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -3,7 +3,7 @@
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2023-1270",
"STATE": "PUBLIC",
"TITLE": "Command Injection in btcpayserver/btcpayserver"
"TITLE": "Cross-site Scripting in btcpayserver/btcpayserver"
},
"affects": {
"vendor": {
@ -36,7 +36,7 @@
"description_data": [
{
"lang": "eng",
"value": "Command Injection in GitHub repository btcpayserver/btcpayserver prior to 1.8.3."
"value": "Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3."
}
]
},
@ -62,7 +62,7 @@
"description": [
{
"lang": "eng",
"value": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')"
"value": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
}
]
}
@ -86,4 +86,4 @@
"advisory": "ad1f917f-2b25-40ef-9215-c805354c683b",
"discovery": "EXTERNAL"
}
}
}