Information disclosure

2023-07-1314:15:00

PRIOn knowledge base

www.prio-n.com

entetsu store

v.13.4.1

remote attacker

sensitive information

channel access token

miniapp

nvd

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.8%

JSON

An issue found in Entetsu Store v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Entetsu Store function.

CPENameOperatorVersion
entetsu_storeeq13.4.1

CPE	Name	Operator	Version
	entetsu_store	eq	13.4.1

References

entetsu.com

github.com/syz913/CVE-reports/blob/main/CVE-2023-31822.md