CVE-2023-39058

MediumCVSS 6.5

Published: 18/09/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

An information leak vulnerability in THE_B_members card version 13.6.1 allows attackers to obtain the channel access token and send crafted messages.

The risk involves potential takeover of the communication channel, enabling attackers to send fraudulent messages to users or steal data.

Immediately update THE_B_members card to the latest version and rotate channel access tokens.

Original NVD description (English source)

An information leak in THE_B_members card v13.6.1 allows attackers to obtain the channel access token and send crafted messages.