CVE-2023-33387
22.06.2023, 11:15
A reflected cross-site scripting (XSS) vulnerability in DATEV eG Personal-Management System Comfort/Comfort Plus v15.1.0 to v16.1.1 P4 allows attackers to steal targeted users' login data by sending a crafted link.
| Vendor | Product | Version |
|---|---|---|
| datev | eg_personal-management_system_comfort\/comfort_plus | 15.1.0 ≤ 𝑥 < 16.1.1 |
| datev | eg_personal-management_system_comfort\/comfort_plus | 16.1.1 |
| datev | eg_personal-management_system_comfort\/comfort_plus | 16.1.1:p1 |
| datev | eg_personal-management_system_comfort\/comfort_plus | 16.1.1:p2 |
| datev | eg_personal-management_system_comfort\/comfort_plus | 16.1.1:p3 |
| datev | eg_personal-management_system_comfort\/comfort_plus | 16.1.1:p4 |
𝑥
= Vulnerable software versions