Urgent Security Bug - Getting Premium for Free

[surajkumar_129]

I'm writing to you because I've found a major bug in your system that lets people get Spotify Premium completely for free.I stumbled upon this method a while back and, to be honest, I tried it myself to see if it was real. It is. I've had a free Premium subscription on my own account for over two months now, and it's still working without any issues. You can check my account to see for yourself:

Email: **bleep**

This seems like a pretty serious loophole. If a lot of people found out about this, you could lose a lot of money from subscriptions.I want to help you fix this. I know exactly how it's done and can give you the step-by-step details so your team can patch it. I was also hoping you might have a bug bounty program or some kind of reward for finding something this big. Since this could save the company a lot of money, I thought it would be fair to ask.

Please let me know what the next steps are. No need to worry about it  I won't share this information with anyone else.

Thank You.

Suraj Kumar Prajapati

Contact: **bleep**

[tunedIN]

interesting

[Ximzend]

Hi @surajkumar_129 

You can submit your research securely through a link on this page.

I hope this helps.

[Levidehaan1]

The problem with the bugbounty program is you need a high signal score. I found a bug, cvss 9.1 but also can’t submit the report. I totally understand the majority of submits are false positive or out of scope but what if you do find a critical bug and can proof it. I just need a ticket to submit.