Information disclosure

2023-07-1314:15:00

PRIOn knowledge base

www.prio-n.com

shizutetsu store

remote attacker

sensitive information

channel access token

nvd

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.8%

JSON

An issue found in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function.

CPENameOperatorVersion
shizutetsu_storeeq13.6.1

CPE	Name	Operator	Version
	shizutetsu_store	eq	13.6.1

References

shizutetsu.com

github.com/syz913/CVE-reports/blob/main/CVE-2023-31820.md