CVE-2023-39737

2023-10-2400:00:00

mitre

github.com

matsuya line security

client secret leakage

channel access token

crafted broadcast messages

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:linecorp:matsuya:13.6.1:*:*:*:*:*:*:*"
    ],
    "vendor": "linecorp",
    "product": "matsuya",
    "versions": [
      {
        "status": "affected",
        "version": "13.6.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]