CVE-2023-39736: Infoleak

Published Oct 24, 2023

Updated

The leakage of the client secret in Fukunagamemberscard Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.

Affected Software

1 affected component

linecorp Fukunaga Memberscard=13.6.1

Event History

Oct 24, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is CVE-2023-39736?

CVE-2023-39736 is a vulnerability in Fukunaga_memberscard Line 13.6.1 that allows attackers to obtain the channel access token and send crafted broadcast messages.

What is the severity level of CVE-2023-39736?

The severity level of CVE-2023-39736 is high, with a CVSS score of 8.2.

How can attackers exploit CVE-2023-39736?

Attackers can exploit CVE-2023-39736 to obtain the client secret and channel access token, allowing them to send crafted broadcast messages.

How can I fix CVE-2023-39736?

To fix CVE-2023-39736, it is recommended to upgrade to a secure version of Fukunaga_memberscard Line, such as version 13.6.2 or later, which addresses the vulnerability.

Where can I find more information about CVE-2023-39736?

More information about CVE-2023-39736 can be found in the following references: [CVE-2023-39736 on GitHub](https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39736.md) and [Fukunaga_memberscard Line on LIFF](https://liff.line.me/1657606123-4Kp0xVrP).