Skip to content
OpenAdvisories

Vendor

Yooooomi

5 known vulnerabilities.

Products

your_spotify 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-28193

    Disclosure of Spotify API Access Tokens to Guest Users Using Public Tokens in your_spotify

    your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify version <1.8.0 allows users to create a public token in the settings, which can be used to provide guest-level access to the information of that specific user in YourSpotify. …

    Yooooomi your_spotify
  • Medium 5.3
    CVE-2024-28192

    NoSQL Injection Leading to Authentication Bypass in your_spotify

    your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify version <1.8.0 is vulnerable to NoSQL injection in the public access token processing logic. Attackers can fully bypass the public token authentication mechanism, regardless i…

    Yooooomi your_spotify
  • Medium 6.5
    CVE-2024-28196

    Clickjacking in your_spotify

    your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify version < 1.9.0 does not prevent other pages from displaying it in an iframe and is thus vulnerable to clickjacking. Clickjacking can be used to trick an existing user of Your…

    Yooooomi your_spotify