CVE-2023-44001
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Summary
CVE-2023-44001 is a vulnerability affecting the Ailand clinic mini-app on Line v13.6.1. This issue enables attackers to send malicious notifications by exploiting the leakage of the channel access token. The token, which is intended to secure communication between the app and the Line platform, is exposed, allowing unauthorized users to craft and transmit notifications to unsuspecting recipients. This vulnerability could lead to phishing attacks or other malicious activities, potentially resulting in data breaches or unintended consequences for users. It is recommended that affected users upgrade to the latest version of the app to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Linecorp
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions