Read the docs

Spotify

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Spotify records in CISA KEV

No Spotify vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Luigi 1 record MEDIUM Spotify 1 record MEDIUM

Records

2 records

TI-2018-01083 CVE-2018-1167 · GHSA-9rj9-5mm5-q8fc

OS command injection in Spotify Music Player

Priority MEDIUM 45

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Spotify Music Player 1.0.69.336.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.04564 Published 2018-04-19 No fix listed CWE-78
TI-2018-16065 CVE-2018-1000843 · GHSA-p69g-f978-xxv9

Luigi version prior to version 2.8.0; after commit…

Priority MEDIUM 40

Luigi version prior to version 2.8.0; after commit 53b52e12745075a8acc016d33945d9d6a7a6aaeb; after GitHub PR spotify/luigi/pull/1870 contains a Cross ite Request Forgery (CSRF) vulnerability in API endpoint: /api/<method…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00807 Published 2018-12-20 Fixed in 2.8.0 CWE-352
Open these records in search →