Skip to content
OpenAdvisories

Vendor

Yooooomi

5 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.1

    Cross-Site Request Forgery (CSRF) vulnerability in API and login in your_spotify

    your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify versions < 1.9.0 do not protect the API and login flow against Cross-Site Request Forgery (CSRF). Attackers can use this to execute CSRF attacks on victims, allowing them to r…