2152 matches found
PT-2024-13550 · Line · Line
Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the mimasaka farm mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For Line version 13.6.1, update to a newer version that...
CVE-2023-48127
An issue in myGAKUYA mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-48135
An issue in mimasakafarm mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
PT-2024-13546 · Line · Line
Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the GINZA CAFE mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system...
CVE-2023-48132
The CVE-2023-48132 issue affects Line v13.6.1 in the kosei entertainment esportsstudioLegends mini-app, where leakage of the channel access token enables attackers to send crafted malicious notifications. Sources consistently describe the vulnerability as tied to the mini-app’s handling of tokens...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which stems from the angel coffee applet that may disclose access tokens...
CVE-2023-48133
An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-48135
The CVE-2023-48135 issue affects the Line platform’s mimasaka_farm mini-app (Line v13.6.1). The root cause is leakage of the channel access token, which enables a remote attacker to send crafted malicious notifications. This is described across multiple connected sources (Red Hat, NVD, CVE lists)...
CVE-2023-48130
An issue in GINZA CAFE mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-48129
An issue in kimono-oldnew mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-48131
An issue in CHIGASAKI BAKERY mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-48129
An issue in kimono-oldnew mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-48126
An issue in Luxe Beauty Clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
PT-2024-13545 · Line · Line
Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the kimono-oldnew mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system. Recommendations: F...
PT-2024-13548 · Line · Line
Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the kosei entertainment esportsstudioLegends mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For version 13.6.1,...
CVE-2023-48132
An issue in kosei entertainment esportsstudioLegends mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-48126
The CVE-2023-48126 entry concerns the Luxe Beauty Clinic mini-app on Line v13.6.1. The vulnerability arises from leakage of the channel access token, enabling attackers to craft and send malicious notifications. Affected component: Luxe Beauty Clinic mini-app; root cause: exposure/leak of the cha...
CVE-2023-48129
The CVE-2023-48129 entry describes a flaw in the kimono-oldnew mini-app used by Line (Line v13.6.1) where leakage of the channel access token can be exploited to send crafted malicious notifications. Public documents cite the affected component (kimono-oldnew mini-app) and the token leakage as th...
CVE-2023-48128
An issue in the UNITED BOXING GYM mini-app (Line) v13.6.1 enables attackers to send crafted malicious notifications by leaking the channel access token. The vulnerability affects the mini-app component that handles notifications, with a CVSS-like assessment indicating network access, low confiden...