Lucene search

MitreCVE-2023-44813

HistoryOct 09, 2023 - 9:15 p.m.

CVE-2023-44813

2023-10-0921:15:10

CWE-79

mitre

web.nvd.nist.gov

cve-2023-44813

cross site scripting

xss

vulnerability

moosocial

remote code execution

crafted payload

security

nvd

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

Confidence

High

EPSS

0.01

Percentile

83.8%

JSON

Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to the mode parameter of the invite friend login function.

Affected configurations

Nvd

Node

moosocialmoosocialMatch3.1.8

VendorProductVersionCPE
moosocialmoosocial3.1.8cpe:2.3:a:moosocial:moosocial:3.1.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
moosocial	moosocial	3.1.8	cpe:2.3:a:moosocial:moosocial:3.1.8:::::::*

References

github.com/ahrixia/CVE-2023-44813

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

Confidence

High

EPSS

0.01

Percentile

83.8%

JSON

Related for CVE-2023-44813