CVE-2023-44001

Summary

CVE-2023-44001 is a vulnerability affecting the Ailand clinic mini-app on Line v13.6.1. This issue enables attackers to send malicious notifications by exploiting the leakage of the channel access token. The token, which is intended to secure communication between the app and the Line platform, is exposed, allowing unauthorized users to craft and transmit notifications to unsuspecting recipients. This vulnerability could lead to phishing attacks or other malicious activities, potentially resulting in data breaches or unintended consequences for users. It is recommended that affected users upgrade to the latest version of the app to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.