Lucene search

K
nvd[email protected]NVD:CVE-2023-31819
HistoryJul 13, 2023 - 2:15 p.m.

CVE-2023-31819

2023-07-1314:15:09
CWE-311
web.nvd.nist.gov
keisei store
livre keisei v.13.6.1
remote attacker
sensitive information
channel access token
miniapp function

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

48.9%

An issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function.

Affected configurations

NVD
Node
livrekeisei_storeMatch13.6.1

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

48.9%

Related for NVD:CVE-2023-31819