taskcafe project records
3 published records for vendor taskcafe project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-284 Improper Access Control1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2023-26770No exploit | TaskCafe 0.3.2 lacks validation in the Cookie value.taskcafe project · taskcafe · CWE-284 | Critical9.8 | — | 0.7% | Oct 4, 2024 |
31Monitor | CVE-2020-25400No exploit | Cross domain policies in Taskcafe Project Management tool before version 0.1.0 and 0.1.1 allows remote attackers to access sensitive data sutaskcafe project · taskcafe | High7.5 | — | 1.8% | Nov 17, 2020 |
26Monitor | CVE-2023-26771No exploit | Taskcafe 0.3.2 is vulnerable to Cross Site Scripting (XSS).taskcafe project · taskcafe · CWE-79 | Medium6.5 | — | 0.3% | Oct 4, 2024 |
- CVE-2023-2677039Monitor
TaskCafe 0.3.2 lacks validation in the Cookie value.
CriticalCVSS 9.8No exploitEPSS 0%taskcafe project · taskcafeOct 4, 2024
- CVE-2020-2540031Monitor
Cross domain policies in Taskcafe Project Management tool before version 0.1.0 and 0.1.1 allows remote attackers to access sensitive data su
HighCVSS 7.5No exploitEPSS 1%taskcafe project · taskcafeNov 17, 2020
- CVE-2023-2677126Monitor
Taskcafe 0.3.2 is vulnerable to Cross Site Scripting (XSS).
MediumCVSS 6.5No exploitEPSS 0%taskcafe project · taskcafeOct 4, 2024