CVE-2023-48128

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Jan 26, 2024
Updated: Jan 29, 2024

Summary

CVE-2023-48128 is a medium severity vulnerability that affects the UNITED BOXING GYM mini-app on Line v13.6.1. Attackers can exploit this vulnerability to send crafted malicious notifications through leakage of the channel access token. The vulnerability has a base score of 5.4 and an exploitability score of 2.8, indicating a moderate risk level. The privileges required for exploitation are low, and there is no user interaction needed. The attack vector is through the network, and the impact on integrity and confidentiality is low. To remediate this vulnerability, it is recommended to update the affected product to a secure version or apply relevant patches as they become available.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-48128 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options