6.5
CVSSv3

CVE-2021-29251

Published: 01/04/2021 Updated: 02/06/2021
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

BTCPay Server prior to 1.0.7.1 mishandles the policy setting in which users can register (in Server Settings > Policies). This affects Docker use cases in which a mail server is configured.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

btcpayserver btcpay server