CVE-2023-48127: XSS
An issue in myGAKUYA mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48127?
CVE-2023-48127 is categorized as a high severity vulnerability due to its potential for exploitation through crafted malicious notifications.
How do I fix CVE-2023-48127?
To mitigate CVE-2023-48127, it is recommended to update the Line mini-app to version 13.6.2 or later to address the channel access token leakage.
What type of attack is associated with CVE-2023-48127?
CVE-2023-48127 allows attackers to execute unauthorized actions by sending crafted notifications due to token leakage.
Which versions of Line are affected by CVE-2023-48127?
CVE-2023-48127 specifically affects Line version 13.6.1.
What is the impact of CVE-2023-48127 on users?
The impact of CVE-2023-48127 may include unauthorized access to user information and potential exploitation of user accounts through crafted notifications.