CVE-2023-39046

MediumCVSS 6.5

Published: 18/09/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

An information leak vulnerability in TonTon-Tei_waiting Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages.

The risk involves potential takeover of the communication channel by an attacker, enabling the sending of fraudulent or malicious messages to users.

Immediately update TonTon-Tei_waiting Line to the latest version and rotate channel access tokens.

Original NVD description (English source)

An information leak in TonTon-Tei_waiting Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages.