We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Taskcafe 0.3.2 is vulnerable to Cross Site Scripting (XSS). There is a lack of validation in the filetype when uploading a SVG profile picture with a XSS payload on it. An authenticated attacker can exploit this vulnerability by uploading a malicious picture which will trigger the payload when the victim opens the file.
Reserved 2023-02-27 | Published 2024-10-04 | Updated 2024-10-04 | Assigner mitregithub.com/JordanKnott/taskcafe
bishopfox.com/blog/taskcafe-version-0-3-2-advisory
Support options
