Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line cherub-hair mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

CVE-2023-44000

An issue in Otakara lapis totuka mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43989

CVE-2023-43989 affects the mokumoku chohu mini-app in Line v13.6.1. The root cause is leakage of the channel access token, enabling attackers to send crafted malicious notifications via the mini-app. The CVSSv3.1 base score is 5.4 (Medium) with Network attack vector and low privileges. Remediatio...

CVE-2023-43994

The CVE-2023-43994 issue concerns Line's Cleaning_makotoya mini-app (Line v13.6.1). The vulnerability arises from leakage of the channel access token, enabling an attacker to send crafted malicious notifications through that token. The description in external sources (connected PT-2023-1716) ties...

CVE-2023-43998

The CVE-2023-43998 issue affects Line’s Books-futaba mini-app (Line v13.6.1). The root problem is leakage of the channel access token, which attackers could exploit to send crafted malicious notifications. Public sources consistently describe a token leakage pathway enabling unauthorized notifica...

CVE-2023-43988

An issue in nature fitness saijo mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line picot.golf mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

CVE-2023-43997

The CVE-2023-43997 entry concerns Line’s Yoruichi hobby base mini-app version v13.6.1. A vulnerability arises from leakage of the channel access token, enabling an attacker to send crafted malicious notifications. The issue is tied to the mini-app’s channel token handling, with CVSS v3.1 indicati...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line Otakara lapis totuka mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by compromising a channel access token...

CVE-2023-43991

CVE-2023-43991 concerns the PRIMA CLINIC mini-app on Line version 13.6.1. The underlying issue is leakage of the channel access token, enabling an attacker to send crafted malicious notifications. Public sources consistently describe this token leakage as the root cause and the ability to misuse ...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line nature fitness saijo mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

CVE-2023-43988

CVE-2023-43988 affects Line’s Nature Fitness Saijo mini-app (v13.6.1). The root cause is leakage of the channel access token, enabling an attacker to send crafted malicious notifications from the mini-app. Impact is limited to the Line mini-app context, enabling adversaries who can access or inte...

PT-2024-13153 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the nature fitness saijo mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For version 13.6.1, consider restricting...

CVE-2023-43999

An issue in COLORFULlaundry mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

WordPress plugin Albo Pretorio On line Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability...

PT-2024-13165 · Line · Ailand Clinic Mini-App

Name of the Vulnerable Software and Affected Versions: Ailand clinic mini-app on Line version 13.6.1 Description: An issue in the Ailand clinic mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to...

PT-2024-13163 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the COLORFUL laundry mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system. Recommendations...

CVE-2023-43989

An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43989

An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line STOCKMAN GROUP mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...