topic Re: Cross-Site Request Forgery (CSRF) Vulnerability in Spotify Logout Feature in Spotify for Developers

Cross-Site Request Forgery (CSRF) Vulnerability in Spotify Logout Feature

medjahdi31 — Thu, 26 Dec 2024 19:55:24 GMT

Hello Spotify Team,

I am writing to report a potential Cross-Site Request Forgery (CSRF) vulnerability within the Spotify platform, specifically related to the logout feature.

For confidentiality reasons, I’m not providing further details in this message. Please contact me privately, and I will be happy to share the necessary information and assist in resolving the issue.

Thank you for your attention to this matter.

Best regards,
MOHAMED MEDJAHDI
medjahdi.mohamed@outlook.com
Algeria

Re: Cross-Site Request Forgery (CSRF) Vulnerability in Spotify Logout Feature

Ximzend — Fri, 27 Dec 2024 09:27:22 GMT

Hi @medjahdi31

You can submit found vulnerabilities to this website.

Let me know how it goes.

Cheers!

Re: Cross-Site Request Forgery (CSRF) Vulnerability in Spotify Logout Feature

medjahdi31 — Fri, 27 Dec 2024 09:44:26 GMT

okaaay man tnksu so much ❤❤❤❤❤