Skip to content
DettingenConnect
?

Security

Last updated: 17 October 2026

This translation is provided for convenience. The legally binding version is the one in German.

DettingenConnect runs on PeoplePlace. The manufacturer of the software and the apps within the meaning of the Cyber Resilience Act (Regulation (EU) 2024/2847) is CMO Internet Dienstleistungen GmbH: it develops PeoplePlace, delivers the security updates and handles reported security vulnerabilities. Who operates DettingenConnect is stated in the legal notice.

Report a vulnerability

Found a vulnerability in DettingenConnect, on dettingenconnect.de or in the apps? Write to info@buefobude.de. The address is also available in machine-readable form at /.well-known/security.txt. Helpful details:

  • what is affected (address, app version, device and operating system),
  • how to reproduce the vulnerability, step by step,
  • what someone could do with it.

We confirm receipt within five working days and keep you informed. Please keep the vulnerability to yourself until it is fixed, at most 90 days after your report.

Rules for searching for vulnerabilities

If you search for vulnerabilities in good faith and follow these rules, you need not fear legal action from us:

  • Only test with your own account. Never access, change or delete other people's data. If you come across it anyway, stop and report it.
  • No load or stress tests, no spam, no deceiving members or the team.
  • Do not exploit a vulnerability further than necessary to demonstrate it.

What we do next

  • We review the report, assess how serious the vulnerability is and fix it as quickly as possible.
  • The website and the server receive the fix directly. For the apps, an update is published in the App Store and on Google Play.
  • We list fixed vulnerabilities below with a short description. On request, we also name who reported them.
  • If a vulnerability is actively exploited or a severe security incident occurs, we report it to the competent authorities (in Germany the BSI), as the Cyber Resilience Act requires, and inform those affected.

Security updates

Security updates are free of charge. Every version of the apps receives security updates for at least five years from its release, each as a new version in the App Store or on Google Play. It is best to turn on automatic updates. The website is always up to date.

Software bill of materials

For every release we record which third-party components (mostly open-source libraries) in which version are part of DettingenConnect, as a software bill of materials (SBOM). We will send it to you on request.

Fixed vulnerabilities

No security vulnerability has been reported so far.