Withdrawn Advisory: HTML injections in BTCPayServer
Date: 2023-01
Affected: nuget/BTCPayServer.Client
Attack vector: other
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2023-0493
CWE: CWE-74
CWE-76
CVSS: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

## Withdrawn Advisory This advisory has been withdrawn because all of the files affected by this vulnerability lie in the [BTCPayServer folder](https://github.com/btcpayserver/btcpayserver/tree/master/BTCPayServer), which is not in the NuGet ecosystem. The [BTCPayServer folder](https://github.com/btcpayserver/btcpayserver/tree/master/BTCPayServer.Client), corresponding to the [BTCPayServer NuGet entry](https://www.nuget.org/packages/BTCPayServer.Client), does not contain any files that were changed to fix the vulnerability. ## Original Description Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5.


Mitigations:

Architectural layers (MAESTRO):