CVE-2023-39736

2023-10-2400:00:00

mitre

github.com

leakage

client secret

crafted broadcast

channel access token

fukunaga_memberscard

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

41.1%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

The leakage of the client secret in Fukunaga_memberscard Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:linecorp:fukunaga_memberscard:13.6.1:*:*:*:*:*:*:*"
    ],
    "vendor": "linecorp",
    "product": "fukunaga_memberscard",
    "versions": [
      {
        "status": "affected",
        "version": "13.6.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]