CVE-2020-25400

7.5 highEPSS 1.9%

High (7.5) in taskcafe project taskcafe. EPSS 1.9% chance of exploitation in the next 30 days.

Cross domain policies in Taskcafe Project Management tool before version 0.1.0 and 0.1.1 allows remote attackers to access sensitive data such as access token.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
Published: 2020-11-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

taskcafe_project:taskcafe

References

https://github.com/JordanKnott/taskcafe
https://github.com/JordanKnott/taskcafe

Check your stack JSON