PT-2020-16078

CVE-2020-25400

Published

2020-11-17

Updated

2021-07-21

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Taskcafe Project Management tool versions prior to 0.1.1

Description The issue allows remote attackers to access sensitive data, such as access tokens, due to problems with cross-domain policies.

Recommendations For versions prior to 0.1.1, update to version 0.1.1 or later to resolve the issue.

Exploitability

Fix

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾