---
id: 3959
title: "TaskCafe, Version 0.3.2 Advisory"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/taskcafe-version-0-3-2-advisory"
published_at: "2023-06-20T00:00:00Z"
tags: ["access-control", "account-takeover", "xss", "vulnerability", "file-upload", "security-advisory", "taskcafe"]
phying_url: "https://phying.com/item/3959"
lang: en
---

# TaskCafe, Version 0.3.2 Advisory

## Summary

Bishop Fox discloses three TaskCafe 0.3.2 vulnerabilities—improper access controls, stored XSS, and insecure file uploads—that chain to take over administrator accounts.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2023-06-20T00:00:00Z
- **Original:** https://bishopfox.com/blog/taskcafe-version-0-3-2-advisory
- **Phying News:** https://phying.com/item/3959