CVE-2023-39740

HIGH 8.2CVE-2023-39740 · Published 25/10/2023 · updated 17/06/2026

In short

CVE-2023-39740 is a HIGH (CVSS 8.2) vulnerability affecting onigiriya-musubee (linecorp).
Chance of exploitation in the next 30 days (EPSS): 0.71%, higher than 53.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
onigiriya-musubee linecorp	`= 13.6.1`	No fix yet

Description

The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.

References

syz913/CVE-reports · Exploit
liff.line.me/1657597257-0ozj8DwJ · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free