Advisories · Technology

Yooooomi your_spotify.

Every CVE that names Yooooomi your_spotify among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-28193 CVE record

CVSS 6.5 Medium

Disclosure of Spotify API Access Tokens to Guest Users Using Public Tokens in your_spotify
- Yooooomi your_spotify
- Information disclosure
Not analysed yet 13 Mar 2024
CVE-2024-28192 CVE record

CVSS 5.3 Medium

NoSQL Injection Leading to Authentication Bypass in your_spotify
- Yooooomi your_spotify
- Other injection
Not analysed yet 13 Mar 2024
CVE-2024-28194 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Authentication Bypass Because of Hardcoded JWT Secret in your_spotify
- Yooooomi your_spotify
- Hard-coded credentials
Not analysed yet 13 Mar 2024
CVE-2024-28195 CVE record

CVSS 8.1 High

Cross-Site Request Forgery (CSRF) vulnerability in API and login in your_spotify
- Yooooomi your_spotify
- Cross-site request forgery (CSRF)
Not analysed yet 13 Mar 2024
CVE-2024-28196 CVE record

CVSS 6.5 Medium

Clickjacking in your_spotify
- Yooooomi your_spotify
- CWE-1021
Not analysed yet 13 Mar 2024