CVE-2024-28193

The CVE affects YourSpotify

CVE-2024-28195

The CVE-2024-28195 CSRF vulnerability affects the YourSpotify self-hosted dashboard (API and login flow). Affected versions are prior to 1.9.0, where CSRF protections were insufficient, enabling attackers to execute CSRF attacks that can retrieve, modify, or delete data on the victim instance. Re...

CVE-2024-28194

CVE-2024-28194 concerns YourSpotify, an open-source self-hosted dashboard for Spotify tracking. Versions prior to 1.8.0 use a hardcoded JWT secret to sign authentication tokens, enabling attackers to forge valid tokens and bypass authentication as any user, including admins. Affected component is...

CVE-2024-28196

CVE-2024-28196 affects YourSpotify (self-hosted Spotify tracking dashboard). The issue arises in versions

CVE-2024-28192

The CVE-2024-28192 entry concerns YourSpotify, an open source self-hosted Spotify tracking dashboard. A NoSQL injection flaw exists in the public access token processing logic for versions before 1.8.0, allowing an attacker to fully bypass the public token authentication mechanism without user in...