Description
BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the HTTPOnly flag for a cookie.
Unscored
CVE-2021-29247
EUVD-2021-15886GHSA-9f24-x4vj-q8g2
BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the HTTPOnly flag for…
Published May 5, 2021 · Updated Aug 3, 2024 · Assigned by mitre