Skip to content
OpenAdvisories

Vendor

Yooooomi

5 known vulnerabilities.

Products

your_spotify 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2024-28194

    Authentication Bypass Because of Hardcoded JWT Secret in your_spotify

    your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify versions < 1.8.0 use a hardcoded JSON Web Token (JWT) secret to sign authentication tokens. Attackers can use this well-known value to forge valid authentication tokens for ar…

    Yooooomi your_spotify