NetSight
medium5.3

CVE-2021-29245

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key.

Impact

BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key.

Affected products

VendorProductAffected versions
BtcpayserverBtcpay Server
through 1.0.7.0

Weakness classification

References