CVE-2023-48129

An issue in kimono-oldnew mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48126

An issue in Luxe Beauty Clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

PT-2024-13543 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the myGAKUYA mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system. Recommendations: For...

CVE-2023-48128

An issue in UNITED BOXING GYM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48135

An issue in mimasakafarm mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48130

An issue in GINZA CAFE mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48131

An issue in CHIGASAKI BAKERY mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48127

The CVE-2023-48127 entry concerns the Line myGAKUYA mini-app (Line v13.6.1). The root cause is leakage of the channel access token, enabling attackers to send crafted malicious notifications. Impact is limited to disclosure/alteration of notifications via token leakage; exploitation status is not...

CVE-2023-48135

The CVE-2023-48135 issue affects the Line platform’s mimasaka_farm mini-app (Line v13.6.1). The root cause is leakage of the channel access token, which enables a remote attacker to send crafted malicious notifications. This is described across multiple connected sources (Red Hat, NVD, CVE lists)...

CVE-2023-48132

The CVE-2023-48132 issue affects Line v13.6.1 in the kosei entertainment esportsstudioLegends mini-app, where leakage of the channel access token enables attackers to send crafted malicious notifications. Sources consistently describe the vulnerability as tied to the mini-app’s handling of tokens...

CVE-2023-48128

An issue in UNITED BOXING GYM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48132

An issue in kosei entertainment esportsstudioLegends mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48127

An issue in myGAKUYA mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48129

An issue in kimono-oldnew mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48128: Undefined Security Weakness

An issue in UNITED BOXING GYM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48127: Improper Neutralization of Input During Web Page Generation

An issue in myGAKUYA mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48126: Undefined Security Weakness

An issue in Luxe Beauty Clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48135: Exposure of Sensitive Information to an Unauthorized Actor

An issue in mimasakafarm mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

PT-2024-13542 · Line · Luxe Beauty Clinic Mini-App

Name of the Vulnerable Software and Affected Versions: Luxe Beauty Clinic mini-app on Line version 13.6.1 Description: The issue allows attackers to send crafted malicious notifications via leakage of the channel access token. This can be exploited by attackers to send malicious notifications...

CVE-2023-48133

CVE-2023-48133 affects Line’s angel coffee mini-app (Line v13.6.1). The underlying issue is leakage of the channel access token, enabling attackers to send crafted malicious notifications. CVSS: Network attack, low complexity, low privileges, no user interaction, confidentiality/integrity impact ...