TaskCafe, Version 0.3.2 Advisory
bishopfox.com | blog | #access-control | #account-takeover | #xss | #vulnerability | #file-upload | #security-advisory | #taskcafe
Summary
Bishop Fox discloses three TaskCafe 0.3.2 vulnerabilities—improper access controls, stored XSS, and insecure file uploads—that chain to take over administrator accounts.
- Published
- Collected
--- id: 3959 title: "TaskCafe, Version 0.3.2 Advisory" source_domain: bishopfox.com source_url: "https://bishopfox.com/blog/taskcafe-version-0-3-2-advisory" published_at: "2023-06-20T00:00:00Z" tags: ["access-control", "account-takeover", "xss", "vulnerability", "file-upload", "security-advisory", "taskcafe"] phying_url: "https://phying.com/item/3959" lang: en --- # TaskCafe, Version 0.3.2 Advisory ## Summary Bishop Fox discloses three TaskCafe 0.3.2 vulnerabilities—improper access controls, stored XSS, and insecure file uploads—that chain to take over administrator accounts. ## Intelligence Metadata - **Sources:** bishopfox.com - **Published:** 2023-06-20T00:00:00Z - **Original:** https://bishopfox.com/blog/taskcafe-version-0-3-2-advisory - **Phying News:** https://phying.com/item/3959