CVE-2023-38849

2023-10-2500:00:00

mitre

github.com

tire-sales line v.13.6.1

remote attacker

sensitive information

crafted get request

cve-2023-38849

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

49.2%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:linecorp:line:13.6.1:*:*:*:*:*:*:*"
    ],
    "vendor": "linecorp",
    "product": "line",
    "versions": [
      {
        "status": "affected",
        "version": "13.6.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]