Approved changes feed: RSS · Atom

cpe:2.3:a:last.fm:last.fm_desktop:*:*:*:*:*:macos:*:*

part: a version: * update: *

VendorLast.Fm (1e7c567d-b905-5057-9b2e-505e658b7982)
ProductLast.Fm Desktop (94a26765-7183-5a07-b6ee-456df7b20ed5)
Edition*
Language*
Software edition*
Target softwaremacos
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-19251 vulnerable 2026-06-08 05:13:21.811887 Details available
The Last.fm desktop app (Last.fm Scrobbler) through 2.1.39 on macOS makes HTTP requests that include an API key without the use of SSL/TLS. Although there is an Enable SSL option, it is disabled by default, and cleartext requests are made as soon as the app starts.
Published: 2019-12-10T14:26:52.000Z
Updated: 2024-08-05T02:09:39.524Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.