Changing spotify information to public while playing a song.
Summary:
While your current status appears as "spotify is playing", there is a security issue where you can change all the information of the song playing, “up to the URL link you direct”
The attacker can change all the information of the song as the attacker wishes, direct anyone the attacker wants to the song the attacker wants, and even get a lot of things that I don't know.
Things I've found so far that can be done:
Change song duration
Change song photo
Changing name, album and URL
I'm only uploading the results. If this bug will be closed, I will also upload the bug that shows how it is done.
-
Thank you for bringing this potential security issue to our attention regarding the Spotify integration on Discord. We take the security and privacy of our users seriously, and we appreciate your efforts in identifying and reporting this issue.
It's concerning to hear about the ability for attackers to manipulate song information, including changing the song duration, photo, name, album, and URL. We understand the implications this could have for users who rely on Discord for music sharing and communication.
Our team will investigate this matter further to understand the scope of the issue and take appropriate action to address it. In the meantime, we encourage you to refrain from sharing any sensitive information or clicking on unknown links while using the Spotify integration on Discord.
If you have any additional information or insights into how this issue can be exploited, please feel free to share them with us. Your cooperation is invaluable in helping us maintain a safe and secure platform for all users.
Thank you again for your diligence and dedication to improving the Discord experience. We will keep the community updated on any developments regarding this issue.
-1 -
Hello Ehsaas 8171 bisp
Thank you for your message. If this problem will be closed, I will be happy to help Discord. Please do not hesitate to ask for any information.
0
Du måste logga in om du vill lämna en kommentar.
Kommentarer
2 kommentarer