Unrated
BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the Secure flag for a cookie.
CVE-2021-29248
First seen on SecPulse
References
- advisory blog.btcpayserver.org
- advisory github.com