Skip to content
OpenAdvisories

Vendor

Swing Music

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.5

    Swing Music Swing Music - Missing Authentication

    A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers to create arbitrary user accounts via the POST /auth/profile/create endpoint. The endpoint is allowlisted from JWT verification, permitting unauthenticated acc…