CVE-2023-31819

Plain English Summary

AI-powered analysis for quick understanding

This vulnerability allows a remote attacker to access sensitive information from the LIVRE KEISEI application by exploiting a weakness in the miniapp function's channel access token. The attacker needs to be able to interact with the application remotely to take advantage of this flaw.

Technical Description

An issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function.

CVSS Vector Analysis

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
Confidentiality ImpactHigh
Integrity ImpactNone
Availability ImpactNone
ScopeUnchanged

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploit Resources

Search for proof-of-concept code and exploit modules

Official References

Est. Bounty
$2,053($1K-$5K)
Vendor Response
Grade FPatched in 964 days

Quick Information

Published

Jul 13, 2023

over 2 years ago

Last Modified

Mar 3, 2026

about 1 month ago

Vendor

keisei store

Product

livre