An issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function.
The product does not encrypt sensitive or critical information before storage or transmission.
Link | Tags |
---|---|
http://keisei.com | not applicable |
http://livre.com | product |
https://github.com/syz913/CVE-reports/blob/main/CVE-2023-31819.md | third party advisory exploit |