CVE-2023-43323

nvd nist nuclei

Published: Sep 28, 2023Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 3.9 / Impact: 2.5

Source: NVD

Description

mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, data[wall_photo], data[userShareVideo] and data[userShareLink].

Affected (1)

Products: Moosocial: Moosocial

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Moosocial Moosocial	Version 3.1.8

Related CWEs

External Control of System or Configuration Setting

One or more system settings or configuration elements can be externally controlled by a user.

References (2)

https://github.com/ahrixia/CVE-2023-43323

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/ahrixia/CVE-2023-43323

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.