Linecorp vulnerabilities
We track 9 vulnerabilities in Linecorp products across 8 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on February 26, 2024.
Latest Linecorp vulnerabilities
- 9.1 Critical severity
Armeria: Improper Authentication
A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authentication. All users who rely on armeria-saml older than version 1.27.2 must upgrade to 1.27.2 or later.
- 8.2 High severity
Line: Improper Control of Generation of Code
An issue in DARTS SHOP MAXIM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
- 8.2 High severity
Onigiriya-musubee: Improper Privilege Management
The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.
- 8.2 High severity
regina_sweets\&bakery: Exposure of Sensitive Information to an Unauthorized Actor
The leakage of the client secret in REGINA SWEETS&BAKERY Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.
- 8.2 High severity
fukunaga_memberscard: Exposure of Sensitive Information to an Unauthorized Actor
The leakage of the client secret in Fukunaga_memberscard Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.
- 8.2 High severity
uomasa_saiji_new: Exposure of Sensitive Information to an Unauthorized Actor
The leakage of the client secret in Uomasa_Saiji_news Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.
- 8.2 High severity
Trackdiner10/10 Mc: Improper Privilege Management
The leakage of the client secret in VISION MEAT WORKS TrackDiner10/10_mc Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.
- 8.2 High severity
Tokueimaru Waiting: Improper Privilege Management
The leakage of the client secret in Tokueimaru_waiting Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages.
- 7.5 High severity
armeria: Incorrect Authorization
Armeria is a microservice framework Spring supports Matrix variables. When Spring integration is used, Armeria calls Spring controllers via `TomcatService` or `JettyService` with the path that may contain matrix variables. Prior to version 1.24.3, the Armeria