CVE-2013-7301: Cantata before 1.2.2 does not restrict access to files in the play queue, which allows remote attackers to...

Security readout for executives and security teams

CVE-2013-7301 is an information disclosure issue in Cantata before 1.2.2. Remote attackers could read songs in the play queue because access to queued files was not properly restricted. The available bundle does not include CVSS, CWE, or evidence of active exploitation. Exposure is most likely limited to legacy Cantata installations before 1.2.2, especially where remote access to the relevant service or interface is reachable by untrusted users. The bundle does not identify affected CPEs, operating systems, or default exposure conditions. Low-to-moderate priority for most organizations, unless Cantata is deployed in reachable environments with sensitive playlist or file metadata. The main business risk is confidentiality exposure from an old application, not known ransomware or privilege escalation activity. Mitigation focus: Upgrade Cantata to version 1.2.2 or later where still deployed.; Remove unsupported or unused legacy Cantata installations.; Restrict remote access to trusted networks and users..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.