Yooooomi

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Yooooomi records in CISA KEV

No Yooooomi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Your Spotify 5 records HIGH

Records

5 records in Your Spotify · all components

TI-2024-18770 CVE-2024-28194

Authentication Bypass Because of Hardcoded JWT Secret in your_spotify

HIGH 82

your_spotify is an open source, self hosted Spotify tracking dashboard.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00823 Published 2024-03-13 Fixed in 1.8.0 CWE-798

TI-2024-18771 CVE-2024-28195

Cross-Site Request Forgery (CSRF) vulnerability in API and login in your_spotify

HIGH 73

your_spotify is an open source, self hosted Spotify tracking dashboard.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0037 Published 2024-03-13 Fixed in 1.9.0 CWE-352

TI-2024-18772 CVE-2024-28196

Clickjacking in your_spotify

MEDIUM 62

your_spotify is an open source, self hosted Spotify tracking dashboard.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00436 Published 2024-03-13 Fixed in 1.9.0 CWE-1021

TI-2024-18769 CVE-2024-28193

Disclosure of Spotify API Access Tokens to Guest Users Using Public Tokens in your_spotify

MEDIUM 62

your_spotify is an open source, self hosted Spotify tracking dashboard.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0064 Published 2024-03-13 Fixed in 1.8.0 CWE-200

TI-2024-18768 CVE-2024-28192

NoSQL Injection Leading to Authentication Bypass in your_spotify

MEDIUM 59

your_spotify is an open source, self hosted Spotify tracking dashboard.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00603 Published 2024-03-13 Fixed in 1.8.0 CWE-74

Open these records in search →