CVE Catalog
CVE-2023-39056
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.38%
30th percentile - higher than 30% of all known CVEs
Summary
An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
Risk Assessment
The risk involves potential takeover of the communication channel, leading to breach of confidentiality and integrity of transmitted data.
Recommendation
Immediately update Coffee-jumbo to the latest version and rotate channel access tokens.
Original NVD description (English source)
An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages.