CVE-2023-39043

MediumCVSS 6.5

Published: 18/09/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

An information leak in YKC Tokushima_awayokocho Line v13.6.1 allows attackers to obtain the channel access token. With this token, they can send crafted messages.

Risk Assessment

The risk involves potential takeover of the communication channel, enabling attackers to send fake or malicious messages to users, compromising trust and security.

Recommendation

Immediately update the YKC Tokushima_awayokocho Line application to the latest available version and revoke and regenerate the channel access token.

Original NVD description (English source)

An information leak in YKC Tokushima_awayokocho Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages.