CVE-2023-43988

An issue in nature fitness saijo mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43988

creationtimestamp| type| source ---|---|--- 2024-01-24 11:26:08+00:00| seen| https://t.me/ctinow/172672 2024-01-26 20:33:22+00:00| seen| https://t.me/arpsyndicate/3062 2024-01-27 04:16:20+00:00| seen| https://t.me/ctinow/174617 2024-02-17 19:46:56+00:00| seen| https://t.me/ctinow/187027...

CVE-2023-43988

CVE-2023-43988 affects Line’s Nature Fitness Saijo mini-app (v13.6.1). The root cause is leakage of the channel access token, enabling an attacker to send crafted malicious notifications from the mini-app. Impact is limited to the Line mini-app context, enabling adversaries who can access or inte...