Cpe:2.3:a:openpetra:openpetra:2023.02:*:*:*:*:*:*:*

OpenPetra version 2023.02 contains an unauthenticated XSS vulnerability in the serverMFinDev.asmx component that allows attackers to steal user session cookies.