CVE-2023-39735: Infoleak
Published Oct 24, 2023
·Updated
The leakage of the client secret in UomasaSaijinews Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.
Affected Software
1 affected component
linecorp Uomasa Saiji New=13.6.1
Event History
Oct 24, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-39735?
The severity of CVE-2023-39735 is high with a score of 8.2.
2
How can attackers exploit CVE-2023-39735?
Attackers can exploit CVE-2023-39735 by obtaining the channel access token and sending crafted broadcast messages.
3
What is the affected software version of CVE-2023-39735?
The affected software version of CVE-2023-39735 is Line 13.6.1.
4
How can I fix CVE-2023-39735?
To fix CVE-2023-39735, it is recommended to update Uomasa_Saiji_news to a version that addresses the vulnerability.
5
Where can I find more information about CVE-2023-39735?
You can find more information about CVE-2023-39735 at the following references: [Link 1](https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39735.md), [Link 2](https://liff.line.me/1657409177-MkPLqO5D)