An issue in rmc R Beauty CLINIC Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Link | Tags |
---|---|
https://liff.line.me/1657640647-Wk2xYj38 | product |
https://github.com/syz913/CVE-reports/blob/main/CVE-2023-38848.md | third party advisory exploit |