CVE-2023-31819
High
|7.5Exploit Available
Plain English Summary
AI-powered analysis for quick understanding
This vulnerability allows a remote attacker to access sensitive information from the LIVRE KEISEI application by exploiting a weakness in the miniapp function's channel access token. The attacker needs to be able to interact with the application remotely to take advantage of this flaw.
Technical Description
An issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function.
CVSS Vector Analysis
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
Confidentiality ImpactHigh
Integrity ImpactNone
Availability ImpactNone
ScopeUnchanged
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploit Resources
Search for proof-of-concept code and exploit modules
Official References
Est. Bounty
$2,053($1K-$5K)
Vendor Response
Grade FPatched in 964 days
Quick Information
Published
Jul 13, 2023
over 2 years ago
Last Modified
Mar 3, 2026
about 1 month ago
Vendor
keisei store
Product
livre