Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line cherub-hair mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

PT-2024-13157 · Stockman · Stockman Group Mini-App On Line

Name of the Vulnerable Software and Affected Versions: STOCKMAN GROUP mini-app on Line version 13.6.1 Description: An issue in the STOCKMAN GROUP mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to...

CVE-2023-44000: Undefined Security Weakness

An issue in Otakara lapis totuka mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43997: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Yoruichi hobby base mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43988: Improper Neutralization of Input During Web Page Generation

An issue in nature fitness saijo mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43992: Exposure of Sensitive Information to an Unauthorized Actor

An issue in STOCKMAN GROUP mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43999: Improper Neutralization of Input During Web Page Generation

An issue in COLORFULlaundry mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43995: Exposure of Sensitive Information to an Unauthorized Actor

An issue in picot.golf mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43998: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-44001: Undefined Security Weakness

An issue in Ailand clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43991: Undefined Security Weakness

An issue in PRIMA CLINIC mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43993: Exposure of Sensitive Information to an Unauthorized Actor

An issue in smaregiappmarket mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43990: Undefined Security Weakness

An issue in cherub-hair mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43989: Undefined Security Weakness

An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43991

CVE-2023-43991 concerns the PRIMA CLINIC mini-app on Line version 13.6.1. The underlying issue is leakage of the channel access token, enabling an attacker to send crafted malicious notifications. Public sources consistently describe this token leakage as the root cause and the ability to misuse ...

CVE-2023-43993

The CVE-2023-43993 entry concerns the Line smaregi_app_market mini-app (Line v13.6.1). The root cause is leakage of the channel access token, enabling attackers to send crafted malicious notifications. Affected component: smaregi_app_market mini-app; affected version: v13.6.1. Impact stated: abil...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line version v13.6.1 suffers from a security vulnerability that stems from Ailand clinic that allows an attacker to send a crafted malicious notification by compromising a channel access token...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by compromising a channel access token...

CVE-2023-43995

An issue in picot.golf mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

PT-2024-13159 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the picot.golf mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This can be exploited by sending malicious notifications. Recommendations:...