CVE-2023-39047

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An information leak in shouzu sweets oz v13.6.1 allows attackers to obtain the channel access token and send crafted messages.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Nov 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-390487.5An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted messages.CVE-2023-390496.5An information leak in youmart-tokunaga v13.6.1 allows attackers to obtain the channel access token and send crafted messages.CVE-2023-390507.5An information leak in Daiky-value.Fukueten v13.6.1 allows attackers to obtain the channel access token and send crafted messages.CVE-2023-390517.5An information leak in VISION MEAT WORKS Track Diner 10/10mbl v13.6.1 allows attackers to obtain the channel access token and send crafted mCVE-2023-390526.5An information leak in Earthgarden_waiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages.CVE-2023-390537.5An information leak in Hattoriya v13.6.1 allows attackers to obtain the channel access token and send crafted messages.CVE-2023-390547.5An information leak in Tokudaya.ekimae_mc v13.6.1 allows attackers to obtain the channel access token and send crafted messages.CVE-2023-390566.5An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages.CVE-2023-390577.5An information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access token and send crafted messages.CVE-2023-390586.5An information leak in THE_B_members card v13.6.1 allows attackers to obtain the channel access token and send crafted messages.CVE-2023-390598.8An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables paramCVE-2023-39063.5An input validation issue in the asset proxy in GitLab EE, affecting all versions from 12.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4
CVE-2023-39047: High severity, CVSS 7.5 | Vulnix