PT-2023-28773 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the studio kent mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system, potentially affectin...

CVE-2023-43298

An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43304

An issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line DARTS SHOP MAXIM mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

PT-2023-28772 · Line · Line +1

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the PARK DANDAN mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For Line version 13.6.1, consider disabling the...

CVE-2023-43300

The CVE concerns Line’s urban_project mini-app (Line v13.6.1), where leakage of a channel access token enables attackers to craft and dispatch malicious notifications. Affected component: channel-token handling within the mini-app; root cause described as token leakage. Impact: attacker could sen...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line urbanproject mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

CVE-2023-43299

An issue in DA BUTCHERS mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

PT-2023-28771

Name of the Vulnerable Software and Affected Versions Line version 13.6.1 Description An issue in the craftbeer bar canvas mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to craft and send malicious...

PT-2023-28769 · Line · Darts Shop Maxim Mini-App

Name of the Vulnerable Software and Affected Versions: DARTS SHOP MAXIM mini-app on Line version 13.6.1 Description: An issue in the DARTS SHOP MAXIM mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This can potentially lead to...

CVE-2023-45558

An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

CVE-2023-45560

An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

CVE-2023-45558

An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

Code injection

An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

CVE-2023-45560

An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

CVE-2023-45560

An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

CVE-2023-45558

CVE-2023-45558 : An issue in Golden v13.6.1 allows an attacker to send crafted notifications by leaking the channel access token, enabling network-based impact to confidentiality. Affected: Golden 13.6.1. Root cause: leakage of the channel access token allowing unauthorized notification delivery....

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v.13.6.1, which stems from a Yasukawa Memberscard that allows an attacker to send crafted notifications by compromising channel access tokens...

CVE-2023-45558

An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

CVE-2023-45560

CVE-2023-45560 concerns Yasukawa memberscard v.13.6.1. The issue is the leakage of the channel access token, enabling an attacker to send crafted notifications. Documented impact includes possible unauthorized notification delivery; CVSSv3.1 base score 7.5 (Network, High impact to confidentiality...