CVE-2023-31822

HighCVSS 7.5/10Last modified Jul 9, 2026

Description

An issue found in Entetsu Store v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Entetsu Store function.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-311

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/syz913/CVE-reports/blob/main/CVE-2023-31822.mdExploit, Third Party Advisory
https://github.com/syz913/CVE-reports/blob/main/CVE-2023-31822.mdExploit, Third Party Advisory

Timeline

Published: Jul 13, 2023
Last modified: Jul 9, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-318237.5An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel acce CVE-2023-318247.5An issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access CVE-2023-318257.5An issue found in Inageya v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the mini CVE-2023-318267.8Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitra CVE-2023-31835.4A vulnerability was found in SourceCodester Performance Indicator System 1.0. It has been declared as problematic. Affected by this vulnerab CVE-2023-31844.8A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as problematic. Affected by this issue is CVE-2023-318427.2Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=edit_faculty&id=.CVE-2023-318437.2Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/view_faculty.php?id=.CVE-2023-318447.2Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_subject.php?id=.CVE-2023-318457.2Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_class.php?id=.CVE-2023-318476.5In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary fi CVE-2023-318488.8davinci 0.3.0-rc is vulnerable to Server-side request forgery (SSRF).