An information leak in THE_B_members card v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
Link | Tags |
---|---|
http://thebmembers.com | not applicable broken link |
https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39058.md | third party advisory exploit |