CyberSecBulletin

LINE vulnerabilities

We track 2 vulnerabilities in LINE products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 26, 2024.

2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score

Latest LINE vulnerabilities

  • 9.1 Critical severity

    Armeria: Improper Authentication

    CVE-2024-1735LINE

    A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authentication. All users who rely on armeria-saml older than version 1.27.2 must upgrade to 1.27.2 or later.

  • 7.5 High severity

    armeria: Incorrect Authorization

    CVE-2023-38493LINE

    Armeria is a microservice framework Spring supports Matrix variables. When Spring integration is used, Armeria calls Spring controllers via `TomcatService` or `JettyService` with the path that may contain matrix variables. Prior to version 1.24.3, the Armeria