PT-2023-28772 · Line · Park Dandan Mini-App+1
CVE-2023-43304
·
Publicado
2023-12-07
·
Atualizado
2024-05-04
CVSS v3.1
8.2
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Line version 13.6.1
Description
An issue in the PARK DANDAN mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token.
Recommendations
For Line version 13.6.1, consider disabling the PARK DANDAN mini-app until a patch is available to prevent the leakage of the channel access token and mitigate the risk of malicious notifications.
Exploit
Correção
Authentication Bypass by Spoofing
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Line
Park Dandan Mini-App