CVE-2023-43305: High severity linecorp Line vulnerability
Published Dec 8, 2023
·Updated
An issue in studio kent mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
Affected Software
1 affected component
linecorp Line=13.6.1
Event History
Dec 8, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-43305?
CVE-2023-43305 has been rated as a moderate severity vulnerability due to its potential for exploitation through crafted malicious notifications.
2
How do I fix CVE-2023-43305?
To fix CVE-2023-43305, upgrade to a patched version of the LINE app that addresses the channel access token leakage.
3
What types of attacks does CVE-2023-43305 enable?
CVE-2023-43305 allows attackers to send malicious notifications to users by exploiting the leakage of the channel access token.
4
Which version of LINE is affected by CVE-2023-43305?
CVE-2023-43305 affects LINE version 13.6.1.
5
Is CVE-2023-43305 an isolated issue?
CVE-2023-43305 appears to be a specific vulnerability within version 13.6.1 and does not indicate a systemic issue across all versions.