CVE-2023-51219

A deep link validation issue in KakaoTalk 10.4.3 allowed a remote adversary to direct users to run any attacker-controlled JavaScript within a WebView. The impact was further escalated by triggering another WebView that leaked its access token in a HTTP request header. Ultimately, this access token could be used to take over another user's account and read her/his chat messages.

CVSS v3 9.6 CRITICAL

9.6^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.8 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://news.ycombinator.com/item?id=40776880
https://stulle123.github.io/posts/kakaotalk-account-takeover/
https://news.ycombinator.com/item?id=40776880
https://stulle123.github.io/posts/kakaotalk-account-takeover/

Configurations

No configuration.

History

No history.

Information

Published : 2024-06-03 20:15

Updated : 2026-06-17 06:40

NVD link : CVE-2023-51219

Mitre link : CVE-2023-51219

CVE.ORG link : CVE-2023-51219

JSON object : View

Products Affected

No product.

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2023-51219", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-51219", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-02-19T21:01:26.565218Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.8}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2024-06-03T20:15:08.810", "references": [{"url": "https://news.ycombinator.com/item?id=40776880", "source": "cve@mitre.org"}, {"url": "https://stulle123.github.io/posts/kakaotalk-account-takeover/", "source": "cve@mitre.org"}, {"url": "https://news.ycombinator.com/item?id=40776880", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://stulle123.github.io/posts/kakaotalk-account-takeover/", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "A deep link validation issue in KakaoTalk 10.4.3 allowed a remote adversary to direct users to run any attacker-controlled JavaScript within a WebView. The impact was further escalated by triggering another WebView that leaked its access token in a HTTP request header. Ultimately, this access token could be used to take over another user's account and read her/his chat messages."}, {"lang": "es", "value": "Un problema de validaci\u00f3n de enlace profundo en KakaoTalk 10.4.3 permiti\u00f3 que un adversario remoto dirigiera a los usuarios a ejecutar cualquier JavaScript controlador de atacante dentro de un WebView. El impacto se intensific\u00f3 a\u00fan m\u00e1s al activar otro WebView que filtr\u00f3 su token de acceso en un encabezado de solicitud HTTP. En \u00faltima instancia, este token de acceso podr\u00eda usarse para hacerse cargo de la cuenta de otro usuario y leer sus mensajes de chat."}], "lastModified": "2026-06-17T06:40:36.650", "sourceIdentifier": "cve@mitre.org"}