Linecorp vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2023-45559 An issue in Tamaki_hamanoki Line v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.High 8.2 · Jan 3, 2024
• CVE-2023-43305 An issue in studio kent mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.High 8.2 · Dec 7, 2023
• CVE-2023-43304 An issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.High 8.2 · Dec 7, 2023
• CVE-2023-43303 An issue in craftbeer bar canvas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token (via High 8.2 · Dec 7, 2023
• CVE-2023-43302 An issue in sanTas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.High 8.2 · Dec 7, 2023
• CVE-2023-43301 An issue in DARTS SHOP MAXIM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.High 8.2 · Dec 7, 2023
• CVE-2023-43300 An issue in urban_project mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.High 8.2 · Dec 7, 2023
• CVE-2023-48134 nagayama_copabowl Line 13.6.1 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor.High 7.5 · Nov 16, 2023
• CVE-2023-38849 An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.High 7.5 · Oct 25, 2023
• CVE-2023-38848 An issue in rmc R Beauty CLINIC Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.High 7.5 · Oct 25, 2023
• CVE-2023-38847 An issue in CHRISTINA JAPAN Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.High 7.5 · Oct 25, 2023
• CVE-2023-38846 An issue in Marbre Lapin Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.High 7.5 · Oct 25, 2023
• CVE-2023-38845 An issue in Anglaise Company Anglaise.Company v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.High 7.5 · Oct 25, 2023
• CVE-2023-39740 The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.High 8.2 · Oct 25, 2023
• CVE-2023-39739 The leakage of the client secret in REGINA SWEETS&BAKERY Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.High 8.2 · Oct 25, 2023
• CVE-2023-39737 The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.High 8.2 · Oct 25, 2023
• CVE-2023-39736 The leakage of the client secret in Fukunaga_memberscard Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.High 8.2 · Oct 25, 2023
• CVE-2023-39735 The leakage of the client secret in Uomasa_Saiji_news Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.High 8.2 · Oct 25, 2023
• CVE-2023-39734 The leakage of the client secret in VISION MEAT WORKS TrackDiner10/10_mc Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadHigh 8.2 · Oct 25, 2023
• CVE-2023-39733 The leakage of the client secret in TonTon-Tei Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.High 8.2 · Oct 25, 2023
• CVE-2023-39732 The leakage of the client secret in Tokueimaru_waiting Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.High 8.2 · Oct 25, 2023
• CVE-2018-13446 An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android.High 7 · Aug 16, 2018
• CVE-2018-13435 An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS.High 7 · Aug 16, 2018
• CVE-2018-0609 Untrusted search path vulnerability in LINE for Windows versions before 5.8.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified dirHigh 7.8 · Jun 26, 2018
• CVE-2016-4850 LINE for Windows before 4.8.3 allows man-in-the-middle attackers to execute arbitrary code.High 8.1 · Apr 20, 2017