An information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://liff.line.me/1657563463-WZNjNErk | broken link |
https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39057.md | third party advisory exploit |