mooSocial mooDating URL find-a-match cross site scripting
CVE-2023-3849

6.1MEDIUM

Key Information:

Vendor: mooSocial
Status: mooDating
Vendor: CVE Published:; 23 July 2023

What is CVE-2023-3849?

A vulnerability, which was classified as problematic, was found in mooSocial mooDating 1.2. Affected is an unknown function of the file /find-a-match of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-235200. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly.

Affected Version(s)

mooDating 1.2

References

https://vuldb.com/?id.235200

vdb-entry

https://vuldb.com/?ctiid.235200

signaturepermissions-required

http://packetstormsecurity.com/files/173691/mooDating-1.2...

EPSS Score

5% chance of being exploited in the next 30 days.

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 23, 2023
Vulnerability Reserved
Jul 22, 2023

Credit

skalvin (VulDB User)

CVE-2023-3849 Data

JSON