Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:taskview:taskview_community:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Unauthenticated Account Takeover in Taskview Community via OAuth Dynamic Registration

Taskview Community versions before 1.56.0 are vulnerable to an authentication bypass in the OAuth 2.0 Dynamic Client Registration endpoint, allowing unauthenticated attackers to register clients and hijack user accounts.

Taskview Community
1t 1c