PT-2024-13153 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the nature fitness saijo mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For version 13.6.1, consider restricting...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line STOCKMAN GROUP mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

CVE-2023-43999

COLORFUL_laundry mini-app on LINE v13.6.1 is affected by CVE-2023-43999 due to leakage of the channel access token, enabling an attacker to send crafted malicious notifications. The issue is described across multiple feeds (Red Hat, NVD/NVD-derived, and related advisories) and is classified with ...

CVE-2023-44000

CVE-2023-44000 affects Otakara lapis totuka mini-app on Line v13.6.1, where leakage of the channel access token allows an attacker to send crafted malicious notifications. The CVE entry notes a Medium impact (C/L/I/L) with no availability impact. Some connected sources indicate PoC may exist, and...

CVE-2023-43997

An issue in Yoruichi hobby base mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by compromising a channel access token...

CVE-2023-43995

An issue in picot.golf mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-44000

An issue in Otakara lapis totuka mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line PRIMA CLINIC mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

CVE-2023-43993: Exposure of Sensitive Information to an Unauthorized Actor

An issue in smaregiappmarket mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43988

CVE-2023-43988 affects Line’s Nature Fitness Saijo mini-app (v13.6.1). The root cause is leakage of the channel access token, enabling an attacker to send crafted malicious notifications from the mini-app. Impact is limited to the Line mini-app context, enabling adversaries who can access or inte...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line COLORFULlaundry mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

CVE-2023-43991

An issue in PRIMA CLINIC mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

PT-2024-13163 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the COLORFUL laundry mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system. Recommendations...

CVE-2023-43992

CVE-2023-43992 affects the STOCKMAN GROUP mini-app on Line version 13.6.1. The root issue is leakage of the channel access token, which can allow an attacker to send crafted malicious notifications. There is no concrete patch information in the provided documents; one PT-security entry (PT-2024-1...

CVE-2023-43988

An issue in nature fitness saijo mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line nature fitness saijo mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

CVE-2023-43996: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-43989

CVE-2023-43989 affects the mokumoku chohu mini-app in Line v13.6.1. The root cause is leakage of the channel access token, enabling attackers to send crafted malicious notifications via the mini-app. The CVSSv3.1 base score is 5.4 (Medium) with Network attack vector and low privileges. Remediatio...

CVE-2023-43995

CVE-2023-43995 affects the Line picot.golf mini-app (Line v13.6.1). The root issue is leakage of the channel access token , which can allow an attacker to cause the app to send crafted, malicious notifications. The available documents do not specify exploitation prevalence, affected builds beyond...