CVE-2023-43299: Medium severity linecorp Line vulnerability

Published Dec 7, 2023

Updated

An issue in DA BUTCHERS mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.

Affected Software

1 affected component

linecorp Line=13.6.1

Event History

Dec 7, 2023

CVE Published

12:00 AM

Data Sourced

12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2023-43299?

The CVE-2023-43299 vulnerability is classified as a high severity issue due to the potential for attackers to send crafted malicious notifications.

How do I fix CVE-2023-43299?

To mitigate CVE-2023-43299, update the affected software LINE to at least version 13.6.2 or later if available.

What are the main effects of CVE-2023-43299?

CVE-2023-43299 allows attackers to exploit leakage of the channel access token, potentially leading to unauthorized notifications being sent to users.

Which versions of LINE are affected by CVE-2023-43299?

CVE-2023-43299 specifically affects LINE version 13.6.1.

Can CVE-2023-43299 lead to data breaches?

Yes, CVE-2023-43299 could facilitate data breaches by allowing attackers to send malicious notifications, which may trick users into providing sensitive information.