An information leak in YKC Tokushima_awayokocho Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
Link | Tags |
---|---|
http://tokushimaawayokocho.com | not applicable broken link |
http://ykc.com | not applicable |
https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39043.md | third party advisory exploit |