CVE-2023-43323: Medium severity moosocial moostore vulnerability

Published Sep 28, 2023

Updated

mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, data[wallphoto], data[userShareVideo] and data[userShareLink].

Affected Software

1 affected component

mooSocial MooSocial=3.1.8

Event History

Sep 28, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is CVE-2023-43323?

CVE-2023-43323 is a vulnerability in mooSocial 3.1.8 that allows for external service interaction on the post function, potentially leading to security risks.

What is the severity of CVE-2023-43323?

CVE-2023-43323 has a severity rating of 6.5, which is considered medium.

Which software version is affected by CVE-2023-43323?

CVE-2023-43323 affects mooSocial 3.1.8 specifically.

What are the parameters affected by CVE-2023-43323?

The parameters affected by CVE-2023-43323 are messageText, data[wall_photo], data[userShareVideo], and data[userShareLink].

How can I fix CVE-2023-43323?

To fix CVE-2023-43323, it is recommended to update mooSocial to a version that has addressed the vulnerability.