An information leak in TonTon-Tei_waiting Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
Link | Tags |
---|---|
http://tonton-teiwaiting.com | not applicable broken link |
https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39046.md | third party advisory exploit |