PT-2020-16078 · Taskcafe · Taskcafe Project Management

Published 2020-11-17 · Updated 2021-07-21 · CVE-2020-25400

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Taskcafe Project Management tool versions prior to 0.1.1

Description The issue allows remote attackers to access sensitive data, such as access tokens, due to problems with cross-domain policies.

Recommendations For versions prior to 0.1.1, update to version 0.1.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2020-25400

Affected Products

Taskcafe Project Management

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-25400 · Security Note
• https://osv.dev/vulnerability/CVE-2020-25400 · Vendor Advisory
• https://github.com/JordanKnott/taskcafe · Note
• https://t.me/cibsecurity/17340 · Telegram Post
• https://t.me/cibsecurity/16460 · Telegram Post