CVE-2023-43991

Name of the Vulnerable Software and Affected Versions PRIMA CLINIC mini-app on Line version 13.6.1

Description An issue in the PRIMA CLINIC mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system.

Recommendations For version 13.6.1, consider restricting access to the channel access token to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the channel access token in the affected mini-app until the issue is resolved.