TI-2023-11764 CVE-2023-26770 · GHSA-gv59-h7rc-cxvr
TaskCafe 0.3.2 lacks validation in the Cookie value.
Priority HIGH 82
TaskCafe 0.3.2 lacks validation in the Cookie value.
Taskcafe Project
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Taskcafe Project records in CISA KEVNo Taskcafe Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records in Taskcafe · all components
TI-2023-11765 CVE-2023-26771 · GHSA-85hj-g8gj-8mxh
Taskcafe 0.3.2 is vulnerable to Cross Site Scripting (XSS).
Priority MEDIUM 62
Taskcafe 0.3.2 is vulnerable to Cross Site Scripting (XSS).
TI-2020-15544 CVE-2020-25400 · GHSA-5f9v-j4qm-jv7q
Cross domain policies in Taskcafe Project Management tool before version 0.1.0 and 0.1.1…
Priority LOW 37
Cross domain policies in Taskcafe Project Management tool before version 0.1.0 and 0.1.1 allows remote attackers to access sensitive data such as access token.