Design/Logic Flaw

2023-12-0707:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

santas mini-app

crafted notifications

token leakage

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.1%

An issue in sanTas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.

CPENameOperatorVersion
lineeq13.6.1

CPE	Name	Operator	Version
	line	eq	13.6.1

References

github.com/syz913/CVE-reports/blob/main/CVE-2023-43302.md