CVE-2021-29245

Medium

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key.

mitre·CWE-338·Published 2021-05-05

CVSS

5.3

EPSS

0.01

KEV

Exploits

cve.orgen

115 chars

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key.

NVDen

115 chars

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key.

NVDes

138 chars

BTCPay Server versiones hasta 1.0.7.0, usa un método débil Next para producir valores pseudoaleatorios para generar una clave API heredada

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N