First published: Fri Jan 26 2024(Updated: )
An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
LINE | =13.6.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-48133 is classified as a high severity vulnerability due to the potential for crafted malicious notifications.
To fix CVE-2023-48133, update the Line app to the latest version that addresses this vulnerability.
LINE version 13.6.1 is specifically affected by CVE-2023-48133.
CVE-2023-48133 allows attackers to exploit a leakage of the channel access token to send crafted notifications.
Currently, the best practice is to update the application as there are no known effective workarounds for CVE-2023-48133.