CVE-2024-23453: Spooncast Spoon

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Android Spoon application version 7.11.1 to 8.6.0 uses hard-coded credentials, which may allow a local attacker to retrieve the hard-coded API key when the application binary is reverse-engineered. This API key may be used for unexpected access of the associated service.

Affected products

• Spooncast Spoon: from 7.11.1, up to and including 8.6.0

Published 2024-01-24. Last modified 2026-06-17.