Vulnerabilities

TI-2024-18769 CVE-2024-28193

Disclosure of Spotify API Access Tokens to Guest Users Using Public Tokens in your_spotify

MEDIUM 62

your_spotify is an open source, self hosted Spotify tracking dashboard.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0064 Published 2024-03-13 Fixed in 1.8.0 CWE-200

TI-2024-18768 CVE-2024-28192

MEDIUM 59

your_spotify is an open source, self hosted Spotify tracking dashboard.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00603 Published 2024-03-13 Fixed in 1.8.0 CWE-74

TI-2024-18770 CVE-2024-28194

HIGH 82

your_spotify is an open source, self hosted Spotify tracking dashboard.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00823 Published 2024-03-13 Fixed in 1.8.0 CWE-798

TI-2024-18771 CVE-2024-28195

HIGH 73

your_spotify is an open source, self hosted Spotify tracking dashboard.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0037 Published 2024-03-13 Fixed in 1.9.0 CWE-352

TI-2024-18772 CVE-2024-28196

MEDIUM 62

your_spotify is an open source, self hosted Spotify tracking dashboard.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00436 Published 2024-03-13 Fixed in 1.9.0 CWE-1021