CVE-2023-43323

2023-09-2800:00:00

mitre

github.com

moosocial 3.1.8

external service interaction

vulnerability

http request

dns request

parameters affected

AI Score

6.8

Confidence

High

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

partial

JSON

mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, data[wall_photo], data[userShareVideo] and data[userShareLink].