PT-2023-26418 · Unknown · Moosocial Moodating

Published 2023-07-23 · Updated 2024-05-17 · CVE-2023-3843

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions mooSocial mooDating version 1.2

Description A problem was found in the URL Handler component, specifically in the /matchmakings/question file, which can lead to cross site scripting. This issue can be exploited remotely. The vendor was attempted to be contacted about the disclosure, but the official mail address was not working properly.

Recommendations For mooSocial mooDating version 1.2, consider restricting access to the /matchmakings/question file of the URL Handler component to minimize the risk of exploitation. As a temporary workaround, avoid using the affected function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-3843

Affected Products

Moosocial Moodating

References · 7

• 🔥 https://exploit-db.com/exploits/51628 · Exploit
• 🔥 http://packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-3843 · Security Note
• https://osv.dev/vulnerability/CVE-2023-3843 · Vendor Advisory
• https://vuldb.com/?id.235194 · Note
• https://vuldb.com/?ctiid.235194 · Note
• https://t.me/cvenotify/54975 · Telegram Post