VYPR

your_spotify

by GitHub

CVEs (1)

  • CVE-2024-28196MedMar 13, 2024
    risk 0.42cvss 6.5epss 0.00

    your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify version < 1.9.0 does not prevent other pages from displaying it in an iframe and is thus vulnerable to clickjacking. Clickjacking can be used to trick an existing user of YourSpotify to trigger…