CVE-2023-48130

An issue in GINZA CAFE mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48126

The CVE-2023-48126 entry concerns the Luxe Beauty Clinic mini-app on Line v13.6.1. The vulnerability arises from leakage of the channel access token, enabling attackers to craft and send malicious notifications. Affected component: Luxe Beauty Clinic mini-app; root cause: exposure/leak of the cha...

CVE-2023-48129

An issue in kimono-oldnew mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48132

An issue in kosei entertainment esportsstudioLegends mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48128

An issue in UNITED BOXING GYM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48132

The CVE-2023-48132 issue affects Line v13.6.1 in the kosei entertainment esportsstudioLegends mini-app, where leakage of the channel access token enables attackers to send crafted malicious notifications. Sources consistently describe the vulnerability as tied to the mini-app’s handling of tokens...

CVE-2023-48127

The CVE-2023-48127 entry concerns the Line myGAKUYA mini-app (Line v13.6.1). The root cause is leakage of the channel access token, enabling attackers to send crafted malicious notifications. Impact is limited to disclosure/alteration of notifications via token leakage; exploitation status is not...

CVE-2023-48135

An issue in mimasakafarm mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48133

CVE-2023-48133 affects Line’s angel coffee mini-app (Line v13.6.1). The underlying issue is leakage of the channel access token, enabling attackers to send crafted malicious notifications. CVSS: Network attack, low complexity, low privileges, no user interaction, confidentiality/integrity impact ...

CVE-2023-48130

The CVE-2023-48130 issue affects the Line GINZA CAFE mini-app (Line v13.6.1). Root cause: leakage of the channel access token, allowing attackers to send crafted malicious notifications. Impact is described as information disclosure leading to token leakage and potential notification manipulation...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which stems from a kimono-oldnew applet that may disclose access tokens...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which stems from the angel coffee applet that may disclose access tokens...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which stems from the mimasakafarm applet that may disclose access tokens...

PT-2024-13544 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the UNITED BOXING GYM mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system. Recommendation...

CVE-2023-48127

An issue in myGAKUYA mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

PT-2024-13542 · Line · Luxe Beauty Clinic Mini-App

Name of the Vulnerable Software and Affected Versions: Luxe Beauty Clinic mini-app on Line version 13.6.1 Description: The issue allows attackers to send crafted malicious notifications via leakage of the channel access token. This can be exploited by attackers to send malicious notifications...

CVE-2023-48127

An issue in myGAKUYA mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which originates in the GINZA CAFE applet that may disclose access tokens...

CVE-2023-48135

The CVE-2023-48135 issue affects the Line platform’s mimasaka_farm mini-app (Line v13.6.1). The root cause is leakage of the channel access token, which enables a remote attacker to send crafted malicious notifications. This is described across multiple connected sources (Red Hat, NVD, CVE lists)...

Malicious ads for restricted messaging applications target Chinese users

An ongoing campaign of malicious ads has been targeting Chinese-speaking users with lures for popular messaging applications such as Telegram or LINE with the intent of dropping malware. Interestingly, software like Telegram is heavily restricted and was previously banned in China. Many Google...