CVE-2023-48128

Summary

CVE-2023-48128 refers to a vulnerability in the UNITED BOXING GYM mini-app on Line version 13.6.1. This issue enables attackers to exploit a notification leakage vulnerability, granting them access to channel access tokens. Attackers can then craft and send malicious notifications to unsuspecting users, potentially gaining unauthorized access to sensitive information or conducting further attacks. The vulnerability poses a significant risk to users of the affected app and requires immediate mitigation efforts from the developers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.