Lucene search

K
nvd[email protected]NVD:CVE-2023-47365
HistoryNov 09, 2023 - 2:15 p.m.

CVE-2023-47365

2023-11-0914:15:08
CWE-326
web.nvd.nist.gov
2
channel access token
lil.off-price store
remote attackers
malicious notifications

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

33.5%

The leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to send malicious notifications to victims.

Affected configurations

Nvd
Node
linecorplineMatch13.6.1
VendorProductVersionCPE
linecorpline13.6.1cpe:2.3:a:linecorp:line:13.6.1:*:*:*:*:*:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

33.5%

Related for NVD:CVE-2023-47365