CVE-2024-23453

MEDIUM 5.5CVE-2024-23453 · Published 24/01/2024 · updated 17/06/2026

In short

CVE-2024-23453 is a MEDIUM (CVSS 5.5) vulnerability affecting spoon (spooncast).
Chance of exploitation in the next 30 days (EPSS): 0.16%, higher than 5.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
spoon spooncast	`≥ 7.11.1, ≤ 8.6.0`	No fix yet

Description

Android Spoon application version 7.11.1 to 8.6.0 uses hard-coded credentials, which may allow a local attacker to retrieve the hard-coded API key when the application binary is reverse-engineered. This API key may be used for unexpected access of the associated service.

References

jvn.jp/en/jp/JVN96154238 · Third Party Advisory
play.google.com/store/apps/details · Product
spoon-support.spooncast.net/jp/update · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free