CyberSecBulletin

Yooooomi vulnerabilities

We track 2 vulnerabilities in Yooooomi products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 13, 2024.

2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score

Latest Yooooomi vulnerabilities

  • 9.8 Critical severity

    your_spotify: Use of Hard-coded Credentials

    CVE-2024-28194Yooooomi

    your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify versions < 1.8.0 use a hardcoded JSON Web Token (JWT) secret to sign authentication tokens. Attackers can use this well-known value to forge valid authentication tokens for arb

  • 8.8 High severity

    your_spotify: Cross-Site Request Forgery

    CVE-2024-28195Yooooomi

    your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify versions < 1.9.0 do not protect the API and login flow against Cross-Site Request Forgery (CSRF). Attackers can use this to execute CSRF attacks on victims, allowing them to re