CVE-2023-47365: Weak Encryption

Published Nov 9, 2023

Updated

The leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to send malicious notifications to victims.

Affected Software

1 affected component

linecorp Line=13.6.1

Event History

Nov 9, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-47365?

CVE-2023-47365 is a vulnerability that allows remote attackers to send malicious notifications to victims by leaking the channel access token in Lil.OFF-PRICE STORE Line 13.6.1.

What is the severity of CVE-2023-47365?

CVE-2023-47365 has a severity rating of medium, with a severity value of 6.5.

How does CVE-2023-47365 affect Lil.OFF-PRICE STORE Line 13.6.1?

CVE-2023-47365 affects Lil.OFF-PRICE STORE Line 13.6.1 by allowing the leakage of channel access token, which can be used by remote attackers to send malicious notifications to victims.

How can I fix CVE-2023-47365?

To fix CVE-2023-47365, it is recommended to update Lil.OFF-PRICE STORE Line to a version that addresses the vulnerability.

Where can I find more information about CVE-2023-47365?

More information about CVE-2023-47365 can be found at the following reference: [CVE-2023-47365](https://github.com/syz913/CVE-reports/blob/main/Lil.OFF-PRICE%20STORE.md)