CVE-2023-43299

Summary

CVE-2023-43299 is a vulnerability affecting DA BUTCHERS mini-app on Line version 13.6.1. This issue permits attackers to transmit malicious notifications, exploiting the leakage of the channel access token. The attacker can manipulate the content of the notifications, potentially leading to phishing or information disclosure. This vulnerability could result in serious security consequences if left unaddressed. It is recommended that users update their Line app and affected mini-apps to the latest versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.