CVE-2023-39739

2023-10-2400:00:00

mitre

github.com

leakage

client secret

regina sweets&bakery

line 13.6.1

attackers

channel access token

crafted broadcast messages

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

41.1%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

The leakage of the client secret in REGINA SWEETS&BAKERY Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:linecorp:regina_sweets\\&bakery:13.6.1:*:*:*:*:*:*:*"
    ],
    "vendor": "linecorp",
    "product": "regina_sweets\\&bakery",
    "versions": [
      {
        "status": "affected",
        "version": "13.6.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]