Description
TaskCafe 0.3.2 lacks validation in the Cookie value. Any unauthenticated attacker who knows a registered UserID can change the password of that user.
Critical · 9.8
CVE-2023-26770
EUVD-2023-30563GHSA-gv59-h7rc-cxvr
TaskCafe 0.3.2 lacks validation in the Cookie value. Any unauthenticated attacker who knows a registered UserID can change the password of …
Published Oct 4, 2024 · Updated Oct 4, 2024 · Assigned by mitre