CVE-2023-47370

EUVD-2023-51487
The leakage of channel access token in bluetrick Line 13.6.1 allows remote attackers to send malicious notifications to victims.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 11%
Affected Products (NVD)
VendorProductVersion
linecorpline
13.6.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/syz913/CVE-reports/blob/main/bluetrick.md
https://github.com/syz913/CVE-reports/blob/main/bluetrick.md