CVE-2023-39740: High severity onigiriya-musubee vulnerability

Published Oct 24, 2023

Updated

The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.

Affected Software

1 affected component

linecorp Onigiriya-musubee=13.6.1

Event History

Oct 24, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is CVE-2023-39740?

CVE-2023-39740 is a vulnerability that allows attackers to obtain the channel access token and send crafted broadcast messages by leaking the client secret in Onigiriya-musubee Line 13.6.1.

How does CVE-2023-39740 impact Onigiriya-musubee Line 13.6.1?

CVE-2023-39740 allows attackers to obtain the channel access token and send crafted broadcast messages in Onigiriya-musubee Line 13.6.1.

What is the severity of CVE-2023-39740?

The severity of CVE-2023-39740 is classified as high with a severity value of 8.2.

How can I fix CVE-2023-39740?

To fix CVE-2023-39740, it is recommended to update Onigiriya-musubee Line to a version that addresses the vulnerability.

Where can I find more information about CVE-2023-39740?

You can find more information about CVE-2023-39740 in the following references: [GitHub](https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39740.md) and [Line LIFF](https://liff.line.me/1657597257-0ozj8DwJ).