Detections
Analytics
CVE-2021-29251
medium
Description
BTCPay Server before 1.0.7.1 mishandles the policy setting in which users can register (in Server Settings > Policies). This affects Docker use cases in which a mail server is configured.
References
https://github.com/btcpayserver/btcpayserver/releases/tag/v1.0.7.1
https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/