General Solutions Steiner Gmbh · Case 3 Taskmanagement · CVE-2023-37829
**Name of the Vulnerable Software and Affected Versions**
General Solutions Steiner GmbH CASE 3 Taskmanagement version 3.3
**Description**
A cross-site scripting (XSS) issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the `notification.message` parameter. This enables the execution of malicious code on the affected system.
**Recommendations**
For General Solutions Steiner GmbH CASE 3 Taskmanagement version 3.3, consider restricting access to the `notification.message` parameter to minimize the risk of exploitation until a patch is available. Avoid using the `notification.message` parameter in sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.