CVE-2023-43298

Summary

CVE-2023-43298 is a vulnerability affecting the SCOL Members Card mini-app on Line version 13.6.1. This issue allows attackers to send malicious notifications by exploiting the leakage of the channel access token. By crafting notifications, adversaries can potentially gain unauthorized access to user information or even install malware. This vulnerability poses a significant risk to Line users interacting with the SCOL Members Card mini-app and requires immediate attention from the affected parties for patching and mitigation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.