CVE-2020-25400

2020-11-1718:15:12

Google

osv.dev

6.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.6%

JSON

Cross domain policies in Taskcafe Project Management tool before version 0.1.0 and 0.1.1 allows remote attackers to access sensitive data such as access token.

References

github.com/JordanKnott/taskcafe