CVE-2020-25400: Taskcafe Project Taskcafe

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

Cross domain policies in Taskcafe Project Management tool before version 0.1.0 and 0.1.1 allows remote attackers to access sensitive data such as access token.

Affected products

• Taskcafe Project Taskcafe: before 0.1.0 (fixed in 0.1.0)

Published 2020-11-17. Last modified 2026-06-17.