Skip to content
OpenAdvisories

Vendor

LINE

26 known vulnerabilities.

5 results · Clear filters · Feed

  • High 7.7

    LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an…

  • High 7.5

    Paths contain matrix variables bypass decorators

    Armeria is a microservice framework Spring supports Matrix variables. When Spring integration is used, Armeria calls Spring controllers via `TomcatService` or `JettyService` with the path that may contain matrix variables. Prior to version 1.24.3, the Armeria…

  • High 7.5

    LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat.

  • High 7.5

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in com.linecorp.armeria:armeria

    Armeria is an open source microservice framework. In affected versions an attacker can access an Armeria server's local file system beyond its restricted directory by sending an HTTP request whose path contains `%2F` (encoded `/`), such as `/files/..%2Fsecret…

  • High 8.8

    Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the …