PT-2023-26418 · Unknown · Moosocial Moodating

CVE-2023-3843 · Publicado 2023-07-23 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions mooSocial mooDating version 1.2

Description A problem was found in the URL Handler component, specifically in the /matchmakings/question file, which can lead to cross site scripting. This issue can be exploited remotely. The vendor was attempted to be contacted about the disclosure, but the official mail address was not working properly.

Recommendations For mooSocial mooDating version 1.2, consider restricting access to the /matchmakings/question file of the URL Handler component to minimize the risk of exploitation. As a temporary workaround, avoid using the affected function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-3843

Produtos afetados

Moosocial Moodating

Referências · 7

• 🔥 https://exploit-db.com/exploits/51628 · Exploit
• 🔥 http://packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-3843 · Nota de Segurança
• https://vuldb.com/?id.235194 · Nota
• https://vuldb.com/?ctiid.235194 · Nota
• https://osv.dev/vulnerability/CVE-2023-3843 · Aviso do Fabricante
• https://t.me/cvenotify/54975 · Publicação no Telegram