Lucene search

K
cveMitreCVE-2023-48126
HistoryJan 26, 2024 - 7:15 a.m.

CVE-2023-48126

2024-01-2607:15:56
mitre
web.nvd.nist.gov
10
cve-2023-48126
luxe beauty clinic
line v13.6.1
attackers
crafted malicious notifications
leakage
channel access token
nvd

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

AI Score

5.5

Confidence

High

EPSS

0

Percentile

14.0%

An issue in Luxe Beauty Clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.

Affected configurations

Nvd
Node
linecorplineMatch13.6.1
VendorProductVersionCPE
linecorpline13.6.1cpe:2.3:a:linecorp:line:13.6.1:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

AI Score

5.5

Confidence

High

EPSS

0

Percentile

14.0%

Related for CVE-2023-48126